Hacker News Reader

So I dived in a bit more while I wait for him to call me back. It's a Magento build using Autorize.net I haven't worked with Magento in years, but should be really simple right. Set up some forwarding rules in Cloudflare to always to go the HTTPS and of course the cert.

At least it isn't some guys backyard CMS.

View on HN

Set up some forwarding rules in Cloudflare to always to go the HTTPS and of course the cert.

Please do not do that. That doesn't solve the problem at all if the origin server is still serving the content over HTTP. You're just lying to visitors by making them think it's secure when it's really not.

Magento is like any other PHP app.. there's Apache (or some other webserver) in front of it.. so just setup Apache properly.

Reply on news.ycombinator.com