diff --git a/src/content/docs/ssl/origin-configuration/ssl-modes/index.mdx b/src/content/docs/ssl/origin-configuration/ssl-modes/index.mdx index 857f215fdd9eab..8f8044e8eac5c2 100644 --- a/src/content/docs/ssl/origin-configuration/ssl-modes/index.mdx +++ b/src/content/docs/ssl/origin-configuration/ssl-modes/index.mdx @@ -37,13 +37,16 @@ Automatic SSL/TLS leverages advanced methods developed by the SSL/TLS Recommende Automatic SSL/TLS will not change your setting to a less secure encryption mode. For example, if your origin certificate expires, the encryption mode will not change from **Full (strict)** to **Full**. You must ensure the validity of your origin SSL/TLS configuration at all times. ::: -Cloudflare is enabling Automatic SSL/TLS on the following dates: +#### Additional details -| Plan | Using SSL/TLS recommender? | Grace period ends | -| -------------- | -------------------------- | ----------------- | -| Non-Enterprise | Yes | November 5th, 2024 | -| Enterprise | Yes | February, 2025 | -| All plans | No | March, 2025 | +- **Scan frequency**: Automatic scans currently occur approximately once per month, though they may happen more frequently in some cases (for example, configuration changes or upgrades). Scans stop when: + + - The site is already using the most secure mode (for example, **Full (strict)**), or + - You switch from auto mode to **Custom SSL/TLS**. + +- **Error checking before upgrades**: To prevent disruptions, Cloudflare checks for `5XX` errors (like `502` or `503`) and evaluates whether the HTTP and HTTPS content is consistent before upgrading a zone's encryption mode. + +- **Upgrade notifications**: Cloudflare sends weekly digest emails listing which zones have been upgraded. These emails are currently sent to Super Admins only. #### Opt out single zone