TLDR InfoSec · MISCELLANEOUS
INTRODUCING AUTOMATIC SSL/TLS: SECURING AND SIMPLIFYING ORIGIN CONNECTIVITY
Summary from the TLDR InfoSec newsletter
Cloudflare offers various options to control encryption between Cloudflare and origin servers that range from never encrypting to following the client request's encryption mode to always using TLS. To simplify the decision process for Cloudflare customers, Cloudflare introduced the SSL/TLS Recommender which would scan origin pages to suggest the best encryption settings. However, Cloudflare found that only 30% of customers were enabling the chosen setting in the UI. To increase adoption, Cloudflare is introducing Automatic SSL/TLS, which will automatically enable the SSL/TLS Recommender's recommended setting.