Announcing Keyless SSL™: All the Benefits of CloudFlare Without Having to Turn Over Your Private SSL Keys
Sep 18, 2014Matthew Prince

Summary
This post introduces Keyless SSL, a novel solution that enables cloud-based SSL termination without requiring Cloudflare to possess customers' private SSL keys. This addresses a critical security concern for financial institutions and enterprises, allowing them to benefit from Cloudflare's scalable network while maintaining strict control over their sensitive cryptographic material. The post details the genesis of the idea, the initial prototype, and the subsequent engineering effort to make it production-ready, highlighting its impact on SSL termination speed and security.
More from the Website Security & Threat Management trail
- We tested our own WAF with frontier AI models. Here’s what we found
- When scanners miss the attack: how Cloudflare Client-Side Security protects storefronts
- Introducing automatic remediation policies with Cloudflare CASB
- Introducing context-aware vulnerability discovery and remediation with Cloudflare Managed Defense and OpenAI Daybreak Models
- Introducing Adaptive Intelligence: undermining the economics of every bot attack