SSL Certificates

[Shawn Gossman]

I use Let's Encrypt.

It's free and easy to use on my hosting.

What one are you all using?

 

[AWS]

Let's encrypt. Used to buy then at Namecheap.

 

[Tracy]

My own self generated one. Then I let CloudFlare present the "real" SSL to the public. It's easy enough to do now if using CloudFlare and you don't have to worry about the infrequent (but does happen) of LE not to renew automatically.



Of course, if you are not using CloudFlare then this won't work.

 

[Shawn Gossman]

My own self generated one. Then I let CloudFlare present the "real" SSL to the public. It's easy enough to do now if using CloudFlare and you don't have to worry about the infrequent (but does happen) of LE not to renew automatically.

View attachment 48

Of course, if you are not using CloudFlare then this won't work.

I've had a few times where LE didn't renew, but not as much.

I need to learn CloudFlare a bit better with forums.

Do you pay for any of it?

 

[Tracy]

Do you pay for any of it?

I'm on the free plan and use DigitalPoints CF add-on. It is probably the simplest solution and all the "important" options are available in the XF ACP from it.
Honestly, XenForo would benefit from having something like it built into the core since so many do use CloudFlare on their sites already.
It will also work with paid plans and by using CF you get some additional perks.

 

[Shawn Gossman]

I'm on the free plan and use DigitalPoints CF add-on. It is probably the simplest solution and all the "important" options are available in the XF ACP from it.
Honestly, XenForo would benefit from having something like it built into the core since so many do use CloudFlare on their sites already.
It will also work with paid plans and by using CF you get some additional perks.

View attachment 49
View attachment 50

What are the disadvantages of using CF?

Are there any? Even if small?

 

[Tracy]

What are the disadvantages of using CF?

Are there any? Even if small?

I haven't really found any. I know some say that CF can, in certain circumstances, slow your site down, but in the overall scheme of things, it's well worth using.
I even have my DNS with them.

 

[Shawn Gossman]

I haven't really found any. I know some say that CF can, in certain circumstances, slow your site down, but in the overall scheme of things, it's well worth using.
I even have my DNS with them.

The slowness is what I've heard about it.

The only think I dislike is when I visit some CF integrated sites is that "checking if you're a human" screen you first get.

 

[Tracy]

The slowness is what I've heard about it.

The only think I dislike is when I visit some CF integrated sites is that "checking if you're a human" screen you first get.

I haven't had any complaints about the speed of my site, but there have been some comments from others that it seems to slow their site down. I do have to wonder if ultimately that revolves back to the base hosting of their site.
As for the "checking if you are human"... that is is usually an indicator that the site itself is either under an attack of some format, or it detects that your origination IP has been used in nefarious uses (usually a VPN).

These are the results of my site from the Google analyzer. Realize, the landing page is VERY graphics intensive due to the niche.
This is the desktop version.


and the mobile via Google speed test REALLY sucks... but that is a XenForo 2.2.x issue apparently



and the desktop via GTMetrix.


A lot of this is not down to using CloudFlare, but the XenForo script itself. I understand the 2.3 version is somewhat more optimized, but like many others that are reilant on 3rd party developers we can't run it yet as we are still awaiting updates. Yet one more weakness of the dependence upon outside add-ons to provide basic functions.

 

[Tracy]

I didn't mention (or link) to the home page.. but much of that rating is ultimately directly attributable to the fact that graphics are heavily involved on my landing page.
The main forum page is much lighter.

 

[Shawn Gossman]

I might have to play around with it more.

Are there any good resources about setting up CF with XF?

 

[Tracy]

I might have to play around with it more.

Are there any good resources about setting up CF with XF?

If you use the DigitalPoint app, it is fairly well covered in the discussion thread over on their site for the app.
The defaults that the add-on itself sets are pretty much solid. If you use image/URL proxy also there is the ability to proxy that through the CF servers to completely hid your server IP address.