Easy On/Off Settings for Authenticated Origin Pulls (Cloudflare)
I suggest a simple option to toggle authenticated origin pulls to take advantage of this feature in cloudflare on a per application basis.

2 comments
-
Kyle Lawrence commented
For authenticated origin pulls to work correctly you must first be using Full SSL, and have access to the server side SSL configuration. If you are using Apache, then you should download origin-pull-ca.pem and install it on your server like this:
SSLVerifyClient require
SSLVerifyDepth 1
SSLCACertificateFile /path/to/origin-pull-ca.pem -
langlers commented
I agree that this would be a great security upgrade.