Comment by Sandeep Panda on "Migrating my blog from WordPress to Hashnode"

Hi 👋 welcome to Hashnode!

We are going to revamp our APIs and document them properly this week.

I think it took some time to issue the certs because there were too many failed validations for your domain since Cloudflare was not bypassed after adding DNS records. We are making some changes to our platform which will help us catch these mistakes early on and prompt our users to correct the config.

Thanks! I’m glad it’s all figured out now. Thanks for featuring the article. ❤️

One more thing I noticed because I can’t use Cloudflare proxying is that if I link to the SSL version, the social media image doesn’t show up. I need to link to the non-SSL version for that to show. Do you know if there’s a way to address that or should I continue to link to the non-SSL version?

Tina Holly I am afraid I don’t follow. Could you please elaborate the issue?

Sandeep Panda

Yes, sure!

This is what it's like when I share the link with https:// (using SSL):

And when I share with http:// (not using SSL):

Note that the image doesn't show on social media unless I share the insecure link. Do you have any suggestions for this?

What I've seen other services do, like Heroku, Netlify, and Github Pages, is allow you to use the service without SSL. This allows me to use Cloudflare to its full potential, including its SSL certificates.

Thanks!

Tina Holly That's weird -- because for me the social image appears correctly with HTTPS.

Can you retry and see?

Unfortunately, we are not able to serve blogs without SSL. There are a couple of strong reasons for this:

Serving a website without SSL is insecure and is prone to man-in-the-middle attack. If we don't serve a blog over HTTPS, we are compromising on security of our users. Read more about it here: web.dev/why-https-matters
HTTPS is a must in order to use many new browser features (e.g. PWAs)
Lastly, some domains such as those having .dev extension work only over HTTPS.

Let me know if the problem persists. I'll dig deeper and find a solution.

Sandeep Panda thanks for checking. That's bizarre. I'll see if it clears up after some time. Thanks for looking into it.

The reasoning re: SSL makes perfect sense. I always use it but usually via Cloudflare. It makes sense to protect users who don't use a CDN like Cloudflare.

Thanks! Really excited about this product!

Hey Tina Just checking - is the problem resolved? If not, happy to dig deeper. :)

Sandeep Panda Thanks for checking in. It looks like if I copy/paste it multiple times, it works subsequent times. Perhaps it's a redirection or timeout issue. I've only tested on Facebook. It's sufficient for now, I'll just keep it in mind to try multiple times if it doesn't show the first time. Thanks for verifying.

Search Hashnode