SSLv3 Support Disabled By Default Due to POODLE Vulnerability
2014-10-14
For the last week we've been tracking rumors about a new vulnerability in SSL. This specific vulnerability, which was just announced, targets SSLv3. ...
Universal SSL: Be just a bit more patient
2014-09-30
It turns out it takes a while to deploy SSL certificates for 2 million websites. :-) Even longer when you get a flood of new sign ups. While we'd hoped to have the deployment complete within 24 hours of the announcement, it now looks like it's going to take a bit longer....
Introducing Universal SSL
2014-09-29
The team at CloudFlare is excited to announce the release of Universal SSL™. Beginning today, we will support SSL connections to every CloudFlare customer, including the 2 million sites that have signed up for the free version of our service....
One More Thing: Keyless SSL and CloudFlare's Growing Network
2014-09-28
I wanted to write one more thing about Keyless SSL, our announcement from last week, before attention shifts to what we'll be announcing on Monday....
Celebrating CloudFlare's 4th Birthday
2014-09-27
Since CloudFlare launched to the public four years ago today, we've always considered September 27th our birthday. We like to celebrate by doing something nice for our team and also for our customers. ...
Announcing Keyless SSL™: All the Benefits of CloudFlare Without Having to Turn Over Your Private SSL Keys
2014-09-18
CloudFlare is an engineering-driven company. This is a story we're proud of because it embodies the essence of who we are: when faced with a problem, we found a novel solution. ...
The Relative Cost of Bandwidth Around the World
2014-08-26
Over the last few months, there’s been increased attention on networks and how they interconnect. CloudFlare runs a large network that interconnects with many others around the world. ...
Google Now Factoring HTTPS Support Into Ranking; CloudFlare On Track to Make it Free and Easy
2014-08-06
As of today, there are only about 2 million websites that support HTTPS. That's a shamefully low number. Two things are about to happen that we at CloudFlare are hopeful will begin to change that and make everyone love locks (at least on the web!)....
CloudFlare Now Supports WebSockets
2014-08-05
I'm pleased to announce that CloudFlare now supports WebSockets. The ability to protect and accelerate WebSockets has been one of our most requested features....
CloudFlare Acquires CryptoSeal
2014-06-18
We're excited to announce that CloudFlare has acquired the Trusted Computing and virtual private network (VPN) as a service company CryptoSeal. ...
Protecting Free Expression Online
2014-06-12
Over the last few years, we’ve witnessed a troubling trend: an increasing number of politically or artistically important sites targeted by very large denial of service attacks. ...
Eliminating the last reasons to not enable IPv6
2014-06-05
Today is June 6. For the last two years, the date has been celebrated as World IPv6 Day. CloudFlare has offered full IPv6 support as well as our IPv6-to-IPv4 gateway since 2012....
CloudFlare is PCI Certified
2014-06-04
Great news for everyone using CloudFlare on an e-commerce site, or a site accepting or processing credit card transactions. After undergoing a Payment Card Industry (PCI) Data Security Standard (DSS) 2.0 security control assessment, we’ve been certified as a Level 1 service provider....
The Hidden Costs of Heartbleed
2014-04-17
A quick followup to our last blog post on our decision to reissue and revoke all of CloudFlare's customers' SSL certificates. One question we've received is why we didn't just reissue and revoke all SSL certificates as soon as we got word about the Heartbleed vulnerability?...
Introducing CNAME Flattening: RFC-Compliant CNAMEs at a Domain's Root
2014-04-03
This post is about a new feature we've been quietly rolling out over the last few months. Last week we began enabling it for everyone by default. ...
Cloudflare Acquires StopTheHacker
2014-02-24
We're excited to announce that Cloudflare has acquired the anti-malware firm StopTheHacker. I wanted to share a little bit about the rationale behind the acquisition and what to expect from the two teamed up companies going forward....
Technical Details Behind a 400Gbps NTP Amplification DDoS Attack
2014-02-13
On Monday we mitigated a large DDoS that targeted one of our customers. The attack peaked just shy of 400Gbps. We've seen a handful of other attacks at this scale, but this is the largest attack we've seen that uses NTP amplification....
2013: Rebuild the Engine; 2014: Step on the Gas
2013-12-31
It's been a busy 2013 here at CloudFlare. By all external measures it was a terrific year. We grew page views, revenue and traffic across our network – all by more than 400%. We added terrific partners and high profile customers. ...
Cloudflare: Happy 3rd Birthday
2013-09-27
Today is CloudFlare's birthday. We opened to the public exactly three years ago today, September 27, 2010. In those three years we've grown to power more than 1.5 million websites and sit in front of more than 4% of all web requests....
Details Behind Today's Internet Hacks
2013-08-27
At 1:19pm, a researcher noticed that the New York Times' website wasn't loading. We know the New York Times tech team, so we emailed to check in. Minutes later, the CTO of the NYT called us back. ...