Automatic SSL/TLS Upgrades - missing checks

[user14857]

What is the name of the domain?

multiple

What is the issue you’re encountering

Automatic SSL/TLS Upgrades upgrade SSL settings to a level site doesn’t support

What steps have you taken to resolve the issue?

Manually set the SSL settings back to correct level.

Was the site working with SSL prior to adding it to Cloudflare?

Yes

What is the current SSL/TLS setting?

Full

What are the steps to reproduce the issue?

There seems to be an issue with your checking systems for automatic SSL upgrades recently.

Last year I got lots of these emails, always checked them and all fine.
It never used to upgrade to something the server couldn’t handle.

But the last few weeks you have been breaking multiple sites by setting to Full (strict) on servers that don’t support strict.
Even a few that were still on flexible, didn’t support full at all and still upgraded.

Auto upgrading where a site supports it is great.
Auto upgrading and breaking sites is terrible.

Also not great that you have put all support contact behind a paywall.

[sdayman]

You didn’t list any domains, but if you can list at least one, we can escalate and have someone from Cloudflare check on it.

[user14857]

[links redacted]

[sdayman]

Got it. Thanks! I’ve added this post to the escalation queue.

[user14857]

and another email just now with 2 more sites.
Both broken as a result.

This is getting ridiculous that cloudflare is breaking lots of my and my customers sites on autopilot.

[sdayman]

Hi again,

I’ve heard back that Engineering has found out why those zones got mistakenly upgraded to Strict. If the fix isn’t already out, it should be out shortly.