Google + Cloudflare

[alec2]

Hello, I purchased a domain from Google that is being hosted on the Wordpress engine. There is no SSL.

I added my domain to Cloudflare in order to obtain SSL and DDOS.

Everything shows as active on Cloudflare after adding the two name servers provided.

However, there is no certificate active for the site. Additionally, when logging into the site through Chrome only, all the content is displayed in text only.

Do I need to get SSL with Google BEFORE adding to Cloudflare?

Thank you!

[epic.network]

Welcome to the Cloudflare Community.

You definitely need to secure your origin site with a certificate that is either issued by a publicly trusted certificate authority or Cloudflare’s Origin CA.

Why you should choose Full Strict, and only Full Strict

Unencrypted & unverified connections Imagine you open Paypal and suddenly get that warning [image] Would you continue? Probably not. For decades leaders in IT security have advocated that people upgrade their sites from unencrypted HTTP to secure HTTPS. And for a reason, everything you send via an HTTP connection is sent in plain text and can be intercepted at any point between you and the server. Equally, you’d probably not proceed if you got such a warning, right? [image] That’s when th…