Skip to content

Commit 003a710

Browse files
angelampcostadaisyfaithauma
authored andcommitted
Updates to Automatic SSL/TLS (#22061)
* Updates to Automatic SSL/TLS * Apply suggestions from code review
1 parent cbd088e commit 003a710

File tree

1 file changed

+9
-6
lines changed
  • src/content/docs/ssl/origin-configuration/ssl-modes

1 file changed

+9
-6
lines changed

src/content/docs/ssl/origin-configuration/ssl-modes/index.mdx

Lines changed: 9 additions & 6 deletions
Original file line numberDiff line numberDiff line change
@@ -37,13 +37,16 @@ Automatic SSL/TLS leverages advanced methods developed by the SSL/TLS Recommende
3737
Automatic SSL/TLS will not change your setting to a less secure encryption mode. For example, if your origin certificate expires, the encryption mode will not change from **Full (strict)** to **Full**. You must ensure the validity of your origin SSL/TLS configuration at all times.
3838
:::
3939

40-
Cloudflare is enabling Automatic SSL/TLS on the following dates:
40+
#### Additional details
4141

42-
| Plan | Using SSL/TLS recommender? | Grace period ends |
43-
| -------------- | -------------------------- | ----------------- |
44-
| Non-Enterprise | Yes | November 5th, 2024 |
45-
| Enterprise | Yes | February, 2025 |
46-
| All plans | No | March, 2025 |
42+
- **Scan frequency**: Automatic scans currently occur approximately once per month, though they may happen more frequently in some cases (for example, configuration changes or upgrades). Scans stop when:
43+
44+
- The site is already using the most secure mode (for example, **Full (strict)**), or
45+
- You switch from auto mode to **Custom SSL/TLS**.
46+
47+
- **Error checking before upgrades**: To prevent disruptions, Cloudflare checks for `5XX` errors (like `502` or `503`) and evaluates whether the HTTP and HTTPS content is consistent before upgrading a zone's encryption mode.
48+
49+
- **Upgrade notifications**: Cloudflare sends weekly digest emails listing which zones have been upgraded. These emails are currently sent to Super Admins only.
4750

4851
#### Opt out single zone
4952

0 commit comments

Comments
 (0)