# Https

**URL:** <https://forum.infinityfree.com/t/https/62521>\
**Category:** Hosting Support\
**Created:** [June 10, 2022, 3:26pm UTC](https://forum.infinityfree.com/t/https/62521 "2022-06-10T15:26:45Z")\
**Posts on this page:** 20\
**Page:** 1

<div class="post-metadata">

**Author:** ![anon28656714](https://forum.infinityfree.com/letter_avatar/anon28656714/32/5_5575768a8748004e209b776fc1b2916d.png) [@anon28656714](https://forum.infinityfree.com/u/anon28656714)\
**Post date:** [June 10, 2022, 3:26pm UTC](https://forum.infinityfree.com/t/https/62521/1 "2022-06-10T15:26:45Z")

</div>

Hello, so after completing optimizing and configuring my url to https, how soon should i start seeing my https showing up? [kimitikamandefinearts.com](http://kimitikamandefinearts.com). ive been refreshing

---

<div class="post-metadata">

**Author:** ![Greenreader9](https://forum.infinityfree.com/user_avatar/forum.infinityfree.com/greenreader9/32/22847_2.png) [@Greenreader9](https://forum.infinityfree.com/u/Greenreader9)\
**Post date:** [June 10, 2022, 3:41pm UTC](https://forum.infinityfree.com/t/https/62521/2 "2022-06-10T15:41:22Z")

</div>

Your website loads securely for me, what does it show for you?

---

<div class="post-metadata">

**Author:** ![anon28656714](https://forum.infinityfree.com/letter_avatar/anon28656714/32/5_5575768a8748004e209b776fc1b2916d.png) [@anon28656714](https://forum.infinityfree.com/u/anon28656714)\
**Post date:** [June 10, 2022, 7:36pm UTC](https://forum.infinityfree.com/t/https/62521/3 "2022-06-10T19:36:35Z")

</div>

![erdftcjyvu](https://forum-cdn.infinityfree.net/original/3X/e/7/e7d3f5467ffd744a909ac49a852f89ed3c56f043.png)

---

<div class="post-metadata">

**Author:** ![wackyblackie](https://forum.infinityfree.com/user_avatar/forum.infinityfree.com/wackyblackie/32/43350_2.png) [@wackyblackie](https://forum.infinityfree.com/u/wackyblackie)\
**Post date:** [June 10, 2022, 7:54pm UTC](https://forum.infinityfree.com/t/https/62521/4 "2022-06-10T19:54:27Z")

</div>

Try clearing your cache

> **[How to clear your cache (And cookies) on any browser - A simple guide - The...](https://tinkertechlab.com/webhosting/security/how-to-clear-your-browsers-cache)**
>
> Need to clear your browsers cache? This guide shows you how to do it in all major desktop and mobile browsers.

---

<div class="post-metadata">

**Author:** ![Greenreader9](https://forum.infinityfree.com/user_avatar/forum.infinityfree.com/greenreader9/32/22847_2.png) [@Greenreader9](https://forum.infinityfree.com/u/Greenreader9)\
**Post date:** [June 10, 2022, 8:05pm UTC](https://forum.infinityfree.com/t/https/62521/5 "2022-06-10T20:05:00Z")

</div>

If clearing the cache does not work, select “Advanced” then “View Certificate”. Screenshot the pop-up window.

---

<div class="post-metadata">

**Author:** ![anon28656714](https://forum.infinityfree.com/letter_avatar/anon28656714/32/5_5575768a8748004e209b776fc1b2916d.png) [@anon28656714](https://forum.infinityfree.com/u/anon28656714)\
**Post date:** [June 10, 2022, 10:36pm UTC](https://forum.infinityfree.com/t/https/62521/6 "2022-06-10T22:36:33Z")

</div>

Yes it showed up. Thanks

---

<div class="post-metadata">

**Author:** ![anon28656714](https://forum.infinityfree.com/letter_avatar/anon28656714/32/5_5575768a8748004e209b776fc1b2916d.png) [@anon28656714](https://forum.infinityfree.com/u/anon28656714)\
**Post date:** [June 10, 2022, 11:10pm UTC](https://forum.infinityfree.com/t/https/62521/7 "2022-06-10T23:10:38Z")

</div>

Cloudflare advices me that the full mode encryption i have for https is not secure still and that i should pause cloudflare first then ensure that im on the full - strict encryption mode. Can you allow me to install the full strict ssl certificate with them?

---

<div class="post-metadata">

**Author:** ![Greenreader9](https://forum.infinityfree.com/user_avatar/forum.infinityfree.com/greenreader9/32/22847_2.png) [@Greenreader9](https://forum.infinityfree.com/u/Greenreader9)\
**Post date:** [June 10, 2022, 11:24pm UTC](https://forum.infinityfree.com/t/https/62521/8 "2022-06-10T23:24:55Z")

</div>

Read for full SSL:

> [@How to setup Full SSL with Cloudflare](https://forum.infinityfree.com/t/how-to-setup-full-ssl-with-cloudflare/60679):
>
> By default, Cloudflare uses a system called “Flexible SSL”. In this system, Cloudflare secures the connection between your visitors and Cloudflare, but not the connection between Cloudflare and your website. Not only is this less secure, some websites (notably WordPress) have trouble detecting whether HTTPS is in use, causing all sorts of issues. The best way to resolve this is by using Full SSL in Cloudflare. This way, the connection between Cloudflare and your website is encrypted, and your w…

---

<div class="post-metadata">

**Author:** ![anon28656714](https://forum.infinityfree.com/letter_avatar/anon28656714/32/5_5575768a8748004e209b776fc1b2916d.png) [@anon28656714](https://forum.infinityfree.com/u/anon28656714)\
**Post date:** [June 11, 2022, 1:40pm UTC](https://forum.infinityfree.com/t/https/62521/9 "2022-06-11T13:40:41Z")

</div>

This is the conversation with cloudflare after i was advised here (infinityfree) that full strict is not recommended or advised. I am left stranded, and even wondering could i have obtained full (strict) encryption mode the previous day as cloudflare informs? … Can we re enable it back?

 ![erdftcjyvu](https://forum-cdn.infinityfree.net/original/3X/3/1/31eacfb6aa2aecfac20682eb1334090b8a43828d.png)

---

<div class="post-metadata">

**Author:** ![wackyblackie](https://forum.infinityfree.com/user_avatar/forum.infinityfree.com/wackyblackie/32/43350_2.png) [@wackyblackie](https://forum.infinityfree.com/u/wackyblackie)\
**Post date:** [June 11, 2022, 1:46pm UTC](https://forum.infinityfree.com/t/https/62521/10 "2022-06-11T13:46:26Z")

</div>

I am really confused, so let’s start from the beginning.

1. Request a “Self Signed” sertificate from InfinityFree at [https://app.infinityfree.net/sslCertificates](https://app.infinityfree.net/sslCertificates).
2. Set the CNAME Records for validation. Wait for propagation. [How to create the CNAME records for free SSL](https://forum.infinityfree.com/t/how-to-create-the-cname-records-for-free-ssl/49321)
3. Install the SSL cert. [How to install an SSL certificate](https://forum.infinityfree.com/t/how-to-install-an-ssl-certificate/49324)
4. Go to your CloudFlare Dashboard at [https://dash.cloudflare.com](https://dash.cloudflare.com), sign in and navigate to your website’s zone.
5. Go to the SSL and Security section on the left
6. **SELECT THE “FULL” MODE**
7. Now everything should be clear.

Let me know if you have any questions.

* * *

> [@Greenreader9](#):
>
> you cannot use “Full Strict” here

You can if you use a trusted provider, such as ZeroSSL or Let’s Encrypt.

---

<div class="post-metadata">

**Author:** ![Greenreader9](https://forum.infinityfree.com/user_avatar/forum.infinityfree.com/greenreader9/32/22847_2.png) [@Greenreader9](https://forum.infinityfree.com/u/Greenreader9)\
**Post date:** [June 11, 2022, 1:46pm UTC](https://forum.infinityfree.com/t/https/62521/11 "2022-06-11T13:46:44Z")

</div>

CA chains are not supported in free hosting, so you cannot use “Full Strict” here.

“Full” mode is plenty secure, but not the maximum level of security offered.

If you pay money for a host, then yes, CA chains should be supported, or you should get your money back.

If you really want to use “Full Strict”, you will need to upgrade to premium hosting.

---

<div class="post-metadata">

**Author:** ![anon28656714](https://forum.infinityfree.com/letter_avatar/anon28656714/32/5_5575768a8748004e209b776fc1b2916d.png) [@anon28656714](https://forum.infinityfree.com/u/anon28656714)\
**Post date:** [June 11, 2022, 2:03pm UTC](https://forum.infinityfree.com/t/https/62521/12 "2022-06-11T14:03:24Z")

</div>

yes this is what i currently have, which Cloudflare asks me not to use.

Im told that even if Cloudflare configuration is secure now, my server is still not configured correctly, there’s a security error.

after i received that response thats when the above attached conversation begun, what im i missing? im not a pro in this things, could there be something i need to be told that looks so obvious, kindly mention it, thanks

---

<div class="post-metadata">

**Author:** ![anon28656714](https://forum.infinityfree.com/letter_avatar/anon28656714/32/5_5575768a8748004e209b776fc1b2916d.png) [@anon28656714](https://forum.infinityfree.com/u/anon28656714)\
**Post date:** [June 11, 2022, 2:05pm UTC](https://forum.infinityfree.com/t/https/62521/13 "2022-06-11T14:05:58Z")

</div>

So you agree that i was on full strict with cloudflare at one point and was detected and barred now i have to pay for host? Coz they say i was already on full strict the previous day

---

<div class="post-metadata">

**Author:** ![wackyblackie](https://forum.infinityfree.com/user_avatar/forum.infinityfree.com/wackyblackie/32/43350_2.png) [@wackyblackie](https://forum.infinityfree.com/u/wackyblackie)\
**Post date:** [June 11, 2022, 2:06pm UTC](https://forum.infinityfree.com/t/https/62521/14 "2022-06-11T14:06:06Z")

</div>

> [@anon28656714](#):
>
> yes this is what i currently have, which Cloudflare asks me not to use.

Ignore them, if they actually didn’t want you to use Full, then it wouldn’t exist.

> [@anon28656714](#):
>
> Im told that even if Cloudflare configuration is secure now

It should be, if you followed my guidance.

> [@anon28656714](#):
>
> my server is still not configured correctly, there’s a security error.

If you try to access the server directly, this is expected because it does not recognize the Self Signed SSL. If you are going to use Cloudflare, this shouldn’t be a problem.

> [@anon28656714](#):
>
> So you agree that i was on full strict with cloudflare at one point and was detected and barred now i have to pay for host?

This is wrong. In order to use Full Strict you must have a trusted SSL certificate. Cloudflare provides one that they trust, but it is not compatible with our servers. There is a workaround, however. You can use a provider such as Let’s Encrypt, ZeroSSL, or GoGetSSL here _and_ use Full Strict.

---

<div class="post-metadata">

**Author:** ![anon28656714](https://forum.infinityfree.com/letter_avatar/anon28656714/32/5_5575768a8748004e209b776fc1b2916d.png) [@anon28656714](https://forum.infinityfree.com/u/anon28656714)\
**Post date:** [June 11, 2022, 2:11pm UTC](https://forum.infinityfree.com/t/https/62521/15 "2022-06-11T14:11:47Z")

</div>

Then this should settle it! But will hackers be easy able to pull down my walls with full mode? whats the security difference for full and full strict?

yesterday the support guys got upset i was unpausing my cloudflare to enable full mode instead of following their instruction by enabling full strict. It got me scared that they are really for me to be secure in the right way, but why is the full mode even there if they are serious against it? they should pull it down then.

---

<div class="post-metadata">

**Author:** ![wackyblackie](https://forum.infinityfree.com/user_avatar/forum.infinityfree.com/wackyblackie/32/43350_2.png) [@wackyblackie](https://forum.infinityfree.com/u/wackyblackie)\
**Post date:** [June 11, 2022, 2:14pm UTC](https://forum.infinityfree.com/t/https/62521/16 "2022-06-11T14:14:00Z")

</div>

> [@anon28656714](#):
>
> Then this should settle it! But will hackers be easy able to pull down my walls with full mode? whats the security difference for full and full strict?

No, I’ve been using Full for months and nothing has gone wrong.

> [@anon28656714](#):
>
> but why is the full mode even there if they are serious against it?

They are not. You just must use it correctly. I have pointed you how to do that in my previous posts.

---

<div class="post-metadata">

**Author:** ![anon28656714](https://forum.infinityfree.com/letter_avatar/anon28656714/32/5_5575768a8748004e209b776fc1b2916d.png) [@anon28656714](https://forum.infinityfree.com/u/anon28656714)\
**Post date:** [June 11, 2022, 2:14pm UTC](https://forum.infinityfree.com/t/https/62521/17 "2022-06-11T14:14:01Z")

</div>

i tried using the Lets Encrypt today, if you check i think it needs something or its propagating, im feeling i need to get over this full strict mode, kindly check whats happening on your end.

---

<div class="post-metadata">

**Author:** ![wackyblackie](https://forum.infinityfree.com/user_avatar/forum.infinityfree.com/wackyblackie/32/43350_2.png) [@wackyblackie](https://forum.infinityfree.com/u/wackyblackie)\
**Post date:** [June 11, 2022, 2:15pm UTC](https://forum.infinityfree.com/t/https/62521/18 "2022-06-11T14:15:08Z")

</div>

I’d leave it how you have it right now. It’s working **amd it is secure**.  
Don’t go messing everything up by using some different SSL mode and certificate.

 ![image](https://forum-cdn.infinityfree.net/original/3X/8/a/8a8bf669df536565723dce3ef1ae2deba62de266.png)

---

<div class="post-metadata">

**Author:** ![anon28656714](https://forum.infinityfree.com/letter_avatar/anon28656714/32/5_5575768a8748004e209b776fc1b2916d.png) [@anon28656714](https://forum.infinityfree.com/u/anon28656714)\
**Post date:** [June 11, 2022, 2:17pm UTC](https://forum.infinityfree.com/t/https/62521/19 "2022-06-11T14:17:23Z")

</div>

Your previous post guided me well. Thanks. Im already having my https on full mode. what could be the “security error” they were noticing?

---

<div class="post-metadata">

**Author:** ![wackyblackie](https://forum.infinityfree.com/user_avatar/forum.infinityfree.com/wackyblackie/32/43350_2.png) [@wackyblackie](https://forum.infinityfree.com/u/wackyblackie)\
**Post date:** [June 11, 2022, 2:35pm UTC](https://forum.infinityfree.com/t/https/62521/20 "2022-06-11T14:35:24Z")

</div>

They probably got a stale copy.

[Next page](https://forum.infinityfree.com/t/https/62521.md?page=2)
