Cloudflare lets you serve your site over SSL without having to purchase and install a security certificate, a product they call “Flexible SSL”. (They act as a proxy and serve your site over SSL from their servers, while the connection from your server to theirs remains unencrypted.)
They currently offer Flexible SSL for free.
With Google's announcement that HTTPS is now a ranking signal, I'm considering switching several sites to Cloudflare, buying a Pro account, and turning on their “Flexible SSL” option, because it seems like the easiest way to serve several sites over HTTPS without having to purchase and manage multiple certificates.
Is there any downside to Cloudflare's Flexible SSL?
I'm comfortable using Cloudflare as a proxy – I'm more interested in two factors:
- The experience for end-users. (e.g. Will visitors see security warnings?)
- The level of security offered. (Enough for a simple blog, but not for an online shop because they'd pass credit card data from their server to yours unencrypted?)