Hacker News Reader

> also the connection between you and them is not encrypted.

The tutorial uses the Full encryption option, which does encrypt the data between your origin server and Cloudflare. You might be thinking of their flexible SSL option?

[EDIT] I might add that for anyone not using GitHub Pages as per the tutorial, they'll need additional steps to get Full SSL working with Cloudflare. It's not effortless.

View on HN

The problem is CloudFlare offers zero way for an end user to identify if a site is setup with flexible SSL or not. Therefore I have no way of verifying the full path back to the origin.

I brought this up and was told "This is something we are definitely considering." but heard nothing beyond that.

they won't do it as it's one of their major selling points: one click ssl

by offering the "flexible ssl" option at all it seems that they couldn't give a toss whether on not it actually protects anyone

Reply on news.ycombinator.com