Engineering May 29, 2026
How we got SSLBoard to 99/100
Getting to a 92 was easy. The climb from there to 99 meant CSP headers on 25 endpoints, dropping CBC ciphers on Cloudflare and our Go servers, and CAA records. Here's the work.
Read article
Getting to a 92 was easy. The climb from there to 99 meant CSP headers on 25 endpoints, dropping CBC ciphers on Cloudflare and our Go servers, and CAA records. Here's the work.
Read article
Harden Cloudflare SSL/TLS in five steps: HTTPS redirects, HSTS, TLS 1.2 minimum, TLS 1.3, and Advanced Certificate Manager to eliminate weak ciphers.
Read article