Hacker Newsnew | past | comments | ask | show | jobs | submitlogin

To serve SSL for your domain, Cloudflare needs a certificate for your domain issued by an accepted CA, which someone needs to buy.

The only way for them to set that up would be to become a CA, get browsers to accept their master certificate and then issue their own certs for their clients.



They actually do offer a service where they proxy your plain-text HTTP to end users as HTTPS and provide a certificate. It's extremely convenient.


Yes, but you still need to buy and give them a certificate, right? The question included "can offer SSL for free without buying certs", which is not possible, AFAIK.


No, they essentially add your domain to a list of domain names in their own certificate.


Really? And their CA allows that? That's amazing.




Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: