Universal SSL: Be just a bit more patient

Published on by Matthew Prince.

It turns out it takes a while to deploy SSL certificates for 2 million websites. :-) Even longer when you get a flood of new sign ups. While we'd hoped to have the deployment complete within 24 hours of the announcement, it now looks like it's going to take a bit longer. We now expect that the full deployment will be complete about 48 hours from now (0700…

Origin Server Connection Security with Universal SSL

Published on by Nick Sullivan.

Earlier today, CloudFlare enabled Universal SSL: HTTPS support for all sites by default. Universal SSL provides state-of-the-art encryption between browsers and CloudFlare’s edge servers keeping web traffic private and secure from tampering. CloudFlare’s Flexible SSL mode is the default for CloudFlare sites on the Free plan. Flexible SSL mode means that traffic from browsers to CloudFlare will be encrypted, but traffic from CloudFlare to a site's…

Introducing Universal SSL

Published on by Matthew Prince.

The team at CloudFlare is excited to announce the release of Universal SSL™. Beginning today, we will support SSL connections to every CloudFlare customer, including the 2 million sites that have signed up for the free version of our service. This morning we began rolling out the Universal SSL across all our current customers. We expect this process to be complete for all current customers before the end…

Shellshock protection enabled for all customers

Published on by John Graham-Cumming.

On Thursday, we rolled out protection against the Shellshock bash vulnerability for all paying customers through the CloudFlare WAF. This protection was enabled automatically and immediately starting blocking malicious requests. We had a number of requests for protection from Shellshock for all our customers, including those on the Free plan. After observing the actual Shellshock traffic across our network and after seeing the true severity of the vulnerability…

One More Thing: Keyless SSL and CloudFlare's Growing Network

Published on by Matthew Prince.

I wanted to write one more thing about Keyless SSL, our announcement from last week, before attention shifts to what we'll be announcing on Monday. Keyless allows us to provide CloudFlare's service without having private SSL keys stored locally on our edge servers. The news last week focused on how this could allow very large customers, like major financial institutions, to use CloudFlare without trusting us with their…

Celebrating CloudFlare's 4th Birthday

Published on by Matthew Prince.

Since CloudFlare launched to the public four years ago today, we've always considered September 27th our birthday. We like to celebrate by doing something nice for our team and also for our customers. Two years ago, for example, we brought a cake into the office and then enabled free IPv6 support for all our customers. Saturday is our birthday this year, so we decided to celebrate it a…