It's especially important to realize that Cloudflare offering free TLS for every... | Hacker News

Hacker News new | past | comments | ask | show | jobs | submit

login

rakoo on April 30, 2015 | parent | context | favorite | on: An introduction to JavaScript-based DDoS

It's especially important to realize that Cloudflare offering free TLS for everyone isn't enough to prevent javascript-based DDOS, if you don't make sure that third-party resources are also behind TLS.

kpcyrd on April 30, 2015 | [–]

I think "use our free TLS" is directed towards the people who host scripts that get embedded by people, like baidu.

Embedding scripts that are hosted behind cloudflare is a terrible idea though.

parryjacob on April 30, 2015 | [–]

It does a lot considering the fact that most resources on a page served over HTTPS also have to be served over HTTPS.

Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact