CloudFlare and SHA-1 Certificates

What this post added

This post details Cloudflare's proactive response to upcoming browser policy changes (Chrome and Firefox) deprecating SHA-1 certificates. It explains the technical implications of SHA-1 vs. SHA-2, the compatibility challenges with older operating systems like Windows XP SP2, and Cloudflare's strategy to manage this by issuing SHA-1 certificates expiring before 2016 for paid customers and SHA-2 for free customers. It also outlines a future plan to offer SNI certificates with SHA-1 fallback for paid customers to maximize reach and security.