My site has SSL and HSTS enabled but it is still not showing behind ssl

[roshan1]

My site citiplots.com has Cloudflare ssl (full) and hsts enabled but when I load it, it still shows that it not secured.

I also have Automatic HTTPS Rewrites enabled.

Can someone help please?

[neiljay]

Hello there,

@roshan1

My site citiplots.com has Cloudflare ssl (full) and hsts enabled

Seems you’ve paused Cloudflare. Would you check and re-enable it?

@roshan1

Cloudflare ssl (full)

As of SSL, Full is not recommended consider instead Full Strict.

Why you should choose Full Strict, and only Full Strict

Unencrypted & unverified connections Imagine you open Paypal and suddenly get that warning [image] Would you continue? Probably not. For decades leaders in IT security have advocated that people upgrade their sites from unencrypted HTTP to secure HTTPS. And for a reason, everything you send via an HTTP connection is sent in plain text and can be intercepted at any point between you and the server. Equally, you’d probably not proceed if you got such a warning, right? [image] That’s when th…

[sdayman]

@neiljay

Seems you’ve paused Cloudflare.

And while it’s Paused, it’s not secure:

The Tutorial @neiljay linked to describes the importance of having SSL at the origin. Please work with your host to get your site working with HTTPS before you unpause Cloudflare.

[roshan1]

Thank you but I don’t think I have paused Cloudflare.

[roshan1]

I don’t see that I have paused the site. How do I unpause it? I have updated the settings to Full Strict

[epic.network]

@roshan1

How do I unpause it?

How to pause Cloudflare