SSL Suddenly Changed from Full to Flexible (many such cases here, none resolved)

[liam]

What is the name of the domain?

Omaha Disc

What is the issue you’re encountering

When nameservers are pointed at Cloudflare, Cloudflare automatically changes our domains SSL from Full toFlexible, making the domain not work. Point nameservers at a domain. We have no idea why this happens. I’ve attached a screenshot of the audit log for this domain showing the automatic change. It is not being done by this email, that is misleading.

What feature, service or problem is this related to?

Nameservers

[liam]

Here are other forum posts of people with the same problem; no one has been able to solve this for any of them:

SSL changes to Flexible, and I have to change it back to Full

When I add a new site, I see that SSL/TLS is automatically set to “Full”. But then when I make it live the site has errors (too many redirects). I go back to the SSL/TLS page, and it’s changed to “Flexible”! I change it back to “Full”, and the error goes away. Why is it changing? Is there a way that I can set it to “Full” on the account level for all sites, so that I don’t have to remember to change it each time?

SSL Randomly Getting Changed from Strict to Flexible

Is anyone else seeing SSL getting randomly switched from Strict to Flexible, thereby causing the “Too many redirects” error? We started seeing this across our customer base a few weeks ago with a very small percentage of domains. It’s been happening across multiple different CF accounts that are all, to the best of my knowledge, tightly controlled. A few domains have been toggled more than once, but that is the only change we have noticed. Since Flexible is the default setting, I am guessing tha…

Here is a screenshot from our audit log of the automatic change:

[cloonan]

Are you using ezoic?

Regardless, you should change your password and rotate your api tokens.