Ask HN: What to do when CloudFlare is on an Adult block list

Shared SSL certificates from CloudFlare are also loaded with porn sites. For <a href="https://www.binarysludge.com" rel="nofollow">https:&#x2F;&#x2F;www.binarysludge.com</a><p>SANs: sni29282.cloudflaressl.com, <i>.askporno.com, </i>.binarysludge.com, <i>.dzej.eu, </i>.grem.eu, <i>.hmtransportation.com, </i>.joowaal.com, <i>.kuwaitinfo.info, </i>.le-foie-gras.eu, <i>.mnmjewellery.com, </i>.mobxnxx.com, <i>.philippines2050.com, </i>.pornfax.com, <i>.pornhideaway.com, </i>.pornmovies101.com, <i>.shokweb.com, </i>.tennistemptation.lt, <i>.tennistt.lt, </i>.the-porn-videos.com, <i>.timenewroman.com, </i>.tutoringunlimited.com, askporno.com, binarysludge.com, dzej.eu, grem.eu, hmtransportation.com, joowaal.com, kuwaitinfo.info, le-foie-gras.eu, mnmjewellery.com, mobxnxx.com, philippines2050.com, pornfax.com, pornhideaway.com, pornmovies101.com, shokweb.com, tennistemptation.lt, tennistt.lt, the-porn-videos.com, timenewroman.com, tutoringunlimited.com<p><a href="https://www.sslshopper.com/ssl-checker.html#hostname=https://www.binarysludge.com" rel="nofollow">https:&#x2F;&#x2F;www.sslshopper.com&#x2F;ssl-checker.html#hostname=https:&#x2F;...</a><p>Time to finally get that StartSSL cert I&#x27;ve been talking about...

You can get the client to disable this via the My Sky page here: <a href="https://secure.sky.com/mysky-homepage/indexb" rel="nofollow">https:&#x2F;&#x2F;secure.sky.com&#x2F;mysky-homepage&#x2F;indexb</a><p>This is opt-in so they clicked a button somewhere when Sky asked them if they wanted adult content blocking.<p>If anyone opts in to blocking; it&#x27;s their funeral. It doesn&#x27;t work. Sky&#x27;s blocking even kills ThinkPad wiki.

I&#x27;d spin it differently - &quot;Sky has put some of your site on the Adult block list.&quot;<p>This way you make it clear that it is Sky&#x27;s fault and to make it work you just have to opt-out of the adult blacklist.

Does anybody else think that $20 a month for a SSL certificate is way too much, Heroku or not? I can get a domain-validated SSL certificate for $5.95 <i>per year</i> and even providers of shared hosting are able to install it at no cost (WebFaction and NearlyFreeSpeech come to mind).

If it is his home broadband, why not get your client to speak to sky and opt-out of the adult blacklist.

Happily CloudFlare has offices in the UK, so it is a good thing you brought this issue up with them. I&#x27;m sure they&#x27;ll have some quick mechanisms to fix this already.

Maybe you can contact the shitty-blacklist and inform them ?

Collateral damage from David Cameron putting pressure on ISPs to block inappropriate content.

Buy a cheap SSL cert from RapidSSL ($11&#x2F;year via namecheap). Get $5 DigitalOcean server, and reverse proxy whatever you&#x27;re serving with nginx. Done for $5&#x2F;month.<p>Bonus points: get the guy a private VPN on there too.

Why did it take an hour of investigating -- I mean, What message was the client getting from the filter? (And why are clients so terrible at reportin error messages?)<p>I submitted the page you get from BT if you try to visit KAT. It might be useful if there&#x27;s a collection of similar pages somewhere?<p><a href="https://news.ycombinator.com/item?id=8989964" rel="nofollow">https:&#x2F;&#x2F;news.ycombinator.com&#x2F;item?id=8989964</a>

You haven&#x27;t really stated why they&#x27;re using CloudFlare - is it for the free TLS?<p>To be honest if they can&#x27;t afford the $240&#x2F;year to get TLS added to Heroku perhaps they&#x27;ve got bigger problems?