SSL/TLS encryption mode is Full changes to Flexible after DNS change

Feedback

When I set up a new domain, the SSL/TLS encryption mode is set to Full. But after the DNS change is made, and I get the email saying Cloudflare is active, the encryption mode gets changed to Flexible and the site goes down until I change it back to Full. It would be nice to have a seamless transfer so that the site won’t go down during the period between when I get the email saying it’s active, and I have a chance to log back into Cloudflare to switch it back to Full.

@matt49 could you let us know the zone that downgraded? because the Automatic SSL/TLS system will never downgrade. It will only upgrade from lower encryption mode to a higher encryption mode.

1 Like

Hi @matt49

This downgrade is not due to automatic SSL/TLS. It only performs upgrades and in this case the downgrade happened due to a legacy process which will be fixed in the coming weeks.

I’ve had it happen with every domain I’ve set up so far.

I’ll take some screenshots the next time I set one up.

Matt Knowles
Aesthetic Design & Photography
(707) 407-5451
[email protected]