when does the SSL change to the strict mode or flexible mode?
the hosting support says that if the SSL install on the panel, then the SSL needs to be flexible. If not there may be some issues occurred. Is that right?
Individually and manually via SSL/TLS tab of Cloudflare dashboard.
This tutorial is deprecated in favour of Get started with SSL/TLS · Cloudflare SSL/TLS docs
ArchiveThis tutorial covers getting SSL working with Cloudflare in various different scenarios.
This assumes you already have your website set up on Cloudflare with all your DNS records set to , if not - please visit <a href="https://community.cloudflare.com/t/64309">Step 1</a>.
Do you want the website to use HTTPS?
Do you already have a valid SSL certificate installed…
Full (Strict) only.
Unencrypted & unverified connections
Imagine you open Paypal and suddenly get that warning
Would you continue? Probably not. For decades leaders in IT security have advocated that people upgrade their sites from unencrypted HTTP to secure HTTPS. And for a reason, everything you send via an HTTP connection is sent in plain text and can be intercepted at any point between you and the server.
Equally, you’d probably not proceed if you got such a warning, right?
That’s when th…
Otherwise, in case you do not have an SSL certificate, you can use Cloudflare SSL, if so, kindly make sure you follow the instructions as follows on the below article to setup an SSL certificate using Cloudflare Origin CA Certificate:
Really not recommended as there would be and are issues like
mixed content, redirect loops, etc.:
This tutorial is deprecated in favour of Flexible - SSL/TLS encryption modes · Cloudflare SSL/TLS docs
The connection between your visitor and Cloudflare is secured, but the connection between Cloudflare and your server is not. You will not need a certificate on your server for this mode. This option is NOT RECOMMENDED.
Flexible makes your site only partially secure - it encrypts the connection between the visitor and Cloudflare - this means they see the :ssl…
Not really. Cloudflare tries to detect if you have SSL before we activated Cloudflare, otherwise it might be some
default settings paramenter which sets the Flexible.
Your hosting provider might not understand the best what are the differences between each option and which one to use correctly.
This topic was automatically closed 15 days after the last reply. New replies are no longer allowed.