SSL/TLS Configuration

Outline

1. SSL/TLS Basics

• What SSL/TLS does
• Why certificates matter
• Benefits of HTTPS

2. Cloudflare Certificate Types

• Universal SSL (free)

  • Auto-issued certs
  • Renewal and validity
  • Supported features

• Dedicated certificates

  • Dedicated SSL
  • When to choose it
  • Setup steps

3. SSL/TLS Modes

• Flexible

  • How it works
  • When it’s acceptable
  • Security caveats

• Full

  • How it works
  • Certificate requirements
  • Suitable scenarios

• Full (strict)

  • How it works
  • Security level
  • Recommended default

4. Certificate Management

• View certificate details
• Automatic renewal
• Certificate status checks

5. HTTPS Redirects

• Enable automatic HTTPS redirects
• HTTP to HTTPS rules
• HSTS (HTTP Strict Transport Security)

6. Advanced Settings

• TLS versions

  • Supported versions
  • Minimum TLS version

• Cipher suites

  • Choosing secure ciphers
  • Hardening guidance

• OCSP Stapling

  • What it is
  • How to enable

7. SSL/TLS Best Practices

• Use strong ciphers
• Rotate/renew certificates
• Enable HSTS
• Monitor certificate status

8. FAQs

• Certificate not active
• Mixed content warnings
• Certificate expired
• TLS version incompatibility

9. Summary

• Key SSL/TLS settings
• Security recommendations