News for hackers. Stuff that matters.

A comment on Universal SSL. Parent comment

Re:Universal SSL by vtlynch on Monday September 29, 2014 @11:36AM (#8383382)
Hi John,

I know Cloudflare will be announcing later today, but how will people be enabling Full SSL (Strict) with this new rollout?

I see these certs being issued out automatically are to subdomains at cloudflare. Will customers who want to enable Full SSL (Strict) be given the ability to enroll for another certificate for free that is issued to their Common Name via your site?

(Context from Cloudflare's announcement: " Later today we'll be publishing a blog with instructions on how to do that at no cost. Once you've installed a certificate on your web server, you can enable the Full or Strict SSL modes which encrypt origin traffic and provide a higher level of security.")

[ Parent | on HN ]
Re:Universal SSL by oliverdavenport on Monday September 29, 2014 @01:27PM (#8383902)
I would expect that they issue you a certificate signed by Cloudflare, which allows them to verify your server & encrypt the connection, but it would not be a trusted CA in users' browsers, but rather it would be trused by Cloudflare internally.
[ Parent | on HN ]