Comment by jgrahamc

11 years ago

Can wait until summer 2015 for a free cert? CloudFlare offers Universal SSL: https://www.cloudflare.com/ssl

That allows cloudflare to read any traffic because you SSL to cloudflare and auth their private key...

Those free certs will encrypt from the browser to CloudFlare's CDN. You still need to do something to encrypt from CloudFlare to the publishing webserver. Self-signing can work for that hop, though Let's Encrypt may wind up being smoother for sys admins.

We've been working with CloudFlare to drive HTTPS adoption, and plan to work with them further on integration.