Question
What is the difference between 'Full' and 'Full (Strict)' SSL modes in Cloudflare, and which should I choose if my origin server has a valid certificate?
Asked by: USER5197
153 Viewed
153 Answers
Answer (153)
'Full' encrypts the connection between Cloudflare and your origin server, but doesn't verify the certificate's validity. 'Full (Strict)' does both – it encrypts the connection *and* verifies that the certificate is valid and trusted. 'Full (Strict)' is the most secure option and is recommended if your origin server has a properly configured, trusted SSL certificate. It provides the highest level of security and prevents man-in-the-middle attacks.