Automatic HTTPS rewriting

[jakariabd@]

Additionally, you can also create a Cloudflare origin certificate to install on your origin server. If your host does not offer free SSL certificates, installing a Cloudflare origin certificate on your server will allow you to use full, strict SSL mode.
If you are using Kinsta to host your site on a subdomain, and your root domain uses Cloudflare Flexible SSL, you can use Cloudflare's Page Rule to make the Kinsta-hosted subdomain use Full, Full (Strict) SSL.
service setup
This option allows you to use Cloudflare's flexible SSL while providing full Cloudflare SSL to the subdomain hosted on Kinsta.
Always use HTTPS.
We recommend enabling this option to automatically forward all HTTP requests to HTTPS.
HSTS stands for HTTP Strict Transport Security uk whatsapp number data and is used to force a web browser to use secure HTTPS connections. Enabling HSTS in Cloudflare ensures that HTTP requests never reach your origin server. If your site is already configured to use HTTPS, we recommend configuring HSTS on your origin server as well.
Minimum TLS version.
TLS, Transport Layer Security, is a cryptographic protocol that provides secure data transmission over a network.
By default, Cloudflare sets the protocol version to TLS 1.0. Some security standards, such as PCI DSS 3.2, require more recent versions of the TLS protocol to meet requirements. If your site requires a specific TLS version, you can change the setting by going to SSL/TLS > Edge Certificates > Minimum TLS Version.
This feature checks the URLs of HTTP resources in your HTML code to determine whether they are accessible via HTTPS. If so, they will be automatically rewritten with the HTTPS variation. Automatic HTTPS rewriting is useful for ensuring a secure browsing experience without mixed content errors.
Keep your site secure with the right Cloudflare settings.
Most of Cloudflare's performance-related settings, such as asset minification and image optimization, can be found in the Speed ​​tab.