My domain without www not secured SSL


#1

Hi
My domain (https://www.domain.com) works well and secure (SSL (Flexible)). But without www (https://domain.com) unsecured. is there is a solution.
Thank you :slight_smile:


#2

Yep, make sure the root domain (domain.com) is cloudflare-enabled (orange cloud) and ensure your SSL level is set to flexible, full or strict. Make sure no page rules are cancelling out your SSL settings.


#3

Hello
Thanks for your answer, but the problem my web hosting uses cloudflare by default in the plesk12 (on / off) control. so I can not change anything in DNS parameters cloudflare … see this image

thank you very much


#4

Page rules


#5

It’s easier to use the Crypto tab to set your account to Always Use HTTPS. Maybe this will fix the problem.

As for your DNS records, since it’s controlled by a third party, there might be something you’d have to do at Silicon Oasis. Hopefully there’s something over there that determines if you’re routing through Cloudflare or not.


#6

Hi :slight_smile: Thank you for your answer.
Always Use HTTPS [On] . I will contact Silicon Oasis. Thank you


#7

One of the limitations of a CNAME setup is that we typically can’t protect the bare root… Technically the RFCs don’t allow for a bare root to domain to be a CNAME value.

To work around this you might ask your hosting provider to forward your example.com to www.example.com using .htaccess or another method.

The other option would be to sign the domain up with Cloudflare directly in full mode which would involve making us your DNS provider and would allow for us to protect the bare root.


#8

Hi
As i understand from the second point, i will try to disable Cloudflare from Plask control, and I configrue my domain.com in Cloudflare (The famous method). I hope the process will succeed
Thanks :slight_smile: