Universal SSL: Encryption all the way to the origin, for free
Feb 24, 2015Nick Sullivan

Summary
This post announces the public beta of Cloudflare's Origin CA service, which provides free, limited-function certificates for customer origin servers. This enables full encryption of traffic from the browser to the origin server, complementing the existing Universal SSL feature. It details the three SSL modes (Flexible, Full, Strict), explains the creation and validation process for Origin CA certificates, and provides instructions on how to create Certificate Signing Requests (CSRs) using CFSSL.
More from the Website Security & Threat Management trail
- We tested our own WAF with frontier AI models. Here’s what we found
- When scanners miss the attack: how Cloudflare Client-Side Security protects storefronts
- Introducing automatic remediation policies with Cloudflare CASB
- Introducing context-aware vulnerability discovery and remediation with Cloudflare Managed Defense and OpenAI Daybreak Models
- Introducing Adaptive Intelligence: undermining the economics of every bot attack