What is the difference between 'Full' and 'Full (Strict)' SSL modes in Cloudflare, and which should I choose if my origin server has a valid certificate?

Responsive Ad Header

Question

Grade: Education Subject: Support
What is the difference between 'Full' and 'Full (Strict)' SSL modes in Cloudflare, and which should I choose if my origin server has a valid certificate?
Asked by:
153 Viewed 153 Answers

Answer (153)

Best Answer
(451)
'Full' encrypts the connection between Cloudflare and your origin server, but doesn't verify the certificate's validity. 'Full (Strict)' does both – it encrypts the connection *and* verifies that the certificate is valid and trusted. 'Full (Strict)' is the most secure option and is recommended if your origin server has a properly configured, trusted SSL certificate. It provides the highest level of security and prevents man-in-the-middle attacks.