Staying afloat: the DROWN Attack and CloudFlare
2016-03-01
CloudFlare customers are automatically protected against the recently disclosed DROWN Attack. We do not have SSLv2 enabled on our servers....
A tale of a DNS exploit: CVE-2015-7547
2016-02-29
A buffer overflow error in GNU libc DNS stub resolver code was announced last week as CVE-2015-7547. While it doesn't have any nickname yet (last year's Ghost was more catchy), it is potentially disastrous....
Introducing CloudFlare Registrar: Designed for Security, Not the Masses
2016-02-24
At CloudFlare, we’ve constructed one of the world’s largest networks purpose-built to protect our customers from a wide range of attacks. ...
We're hosting a Null Singapore meetup!
2016-02-19
We're happy to announce that next week CloudFlare is hosting the Null Security meetup in Singapore. You are invited!...
Padding oracles and the decline of CBC-mode cipher suites
2016-02-12
At CloudFlare, we’re committed to making sure the encrypted web is available to everyone, even those with older browsers. At the same time, we want to make sure that as many people as possible are using the most modern and secure encryption available to them. ...
Change the (S)Channel! Deconstructing the Microsoft TLS Session Resumption bug
2016-02-11
Several months ago we started hearing occasional reports from .NET developers that they were having trouble maintaining HTTPS sessions with one of our customer’s websites. ...
CloudFlare’s Impact On The HTTP/2 “Universe”
2016-02-03
CloudFlare released HTTP/2 support for all customers on December 3rd, 2015. Now, two months later, it's time to take a look at the impact of this release on the HTTP/2 "universe"....
Advanced Technical "Hacks" for your site's SEO
2016-01-25
Improving your site’s SEO is probably top of mind for you, but doing so takes a lot of hard work and the rules of the game are constantly changing....
CloudFlare launches new data centers in Oslo and Minneapolis
2016-01-22
Four thousand miles (6,400 kilometers) separate CloudFlare’s latest two data centers: Oslo (#75) and Minneapolis (#76)....
Preventing Malicious Request Loops
2016-01-21
The web is an collaborative ecosystem. Web standards exist to ensure that participants of the network behave in a predictable way....
We’re Hosting a Go Hackathon!
2016-01-20
The Go test coverage implementation is quite ingenious: when asked to, the Go compiler will preprocess the source so that when each code portion is executed a bit is set in a coverage bitmap....
Go coverage with external tests
2016-01-19
The Go test coverage implementation is quite ingenious: when asked to, the Go compiler will preprocess the source so that when each code portion is executed a bit is set in a coverage bitmap....
Think Global, Peer Local. Peer with CloudFlare at 100 Internet Exchange Points
2016-01-18
Internet Exchange Points (IXPs) or Network Access Points (NAPs) facilities are where networks meet, participating in what's known as peering, which interconnects various parts of the global Internet....
Flexible, secure SSH with DNSSEC
2016-01-13
If you read this blog on a regular basis, you probably use the little tool called SSH, especially its ubiquitous and most popular implementation OpenSSH....
Cairo, Egypt: CloudFlare’s 74th Data Center
2015-12-30
It’s been a big year of expansion for CloudFlare’s global network as we added new data centers across six continents, and we’re certainly not done. Today we announce the launch of our newest data center in Cairo, Egypt and a partnership with Telecom Egypt. ...
How to Talk to Your Parents About Encryption
2015-12-25
It’s December 25th, which means most of you are probably at home visiting with family. I asked a few of the security engineers here at CloudFlare how they explain their jobs when they’re home for the holidays, and here's what they had to say....
Zdrasti, Sofia! CloudFlare’s 73rd Data Center Now Live
2015-12-24
Only days after the launch of our Hamburg data center, CloudFlare is excited to announce yet another European data center - this time in Sofia, Bulgaria. With over 1.2 million people, Sofia is a city with rich history tracing back over 7,000 years....
Why it’s harder to forge a SHA-1 certificate than it is to find a SHA-1 collision
2015-12-22
It’s well known that SHA-1 is no longer considered a secure cryptographic hash function. Researchers now believe that finding a hash collision (two values that result in the same value when SHA-1 is applied) is inevitable and likely to happen....
What's inside net/http? Late binding in the Go standard library
2015-12-21
It's well known that we're heavy users of the Go programming language at CloudFlare. Our work often involves delving into the standard library source code to understand internal code paths, error handling and performance characteristics....
Unser neues 72. Rechenzentrum: Hamburg
2015-12-18
Yesterday we announced new points of presence (PoPs) in Montreal and Vancouver. Today: Hamburg. However, the holidays are hardly over, and we have lots more cheer to spread. ...
