Re:Google to prioritise secure websites
by tuneladora on Thursday August 07, 2014 @09:34AM
(#8147597)
I'm don't know the details about your stack, but while the processing cost of SSL is not neglectable, i think you might be overestimating it.
I can not think of any scenario in which HTTP runs fine but HTTPS will kill the server.
Yes, we are going to make SSL certificates available to customers on our free plan for free.
Nice! Which CA are you using?
I can't reveal that at the moment. That will be part of the announcement in mid-October. I can say that this will not require anyone to install new root certs in browsers etc.
You are? ETA?
That's detailed in the blog post I was linking to above: http://blog.cloudflare.com/google-now-factoring-https-suppor...
To quote it: "Second, at CloudFlare we've cleared one of the last major technical hurdle before making SSL available for every one of our customers -- even free customers. We're on track to roll out SSL for all CloudFlare customers by mid-October."
Right now, launching without CloudFlare would almost certainly result in the unfortunate death of my VPS. SSL would only expediate that. OTOH, the minimum paid CloudFlare package would quadruple my hosting costs - I'm not running enterprise scale infrastructure for my personal site!
If CloudFlare do make it part of their free package, I will definitely use SSL by default.