Your website is using Cloudflare’s Flexible SSL, which needs some more configuration on WordPress to work properly:
WordPress is a great and very popular website building tool, and Cloudflare is a great way to get HTTPS on your website for free. Thanks to Cloudflare’s Flexible SSL system, you don’t even need to manage SSL certificates to use it!
However, getting WordPress to show a padlock and make all pages work can be a bit tricky. This article explains a good way to configure your website correctly with Cloudflare Flexible SSL.
Heads up! Instead of making WordPress work with Flexible SSL, you can also c…
The fastest and easiest way to work around this is to use Cloudflare’s Full SSL with a self-signed certificate from our Free SSL Certificates tool; here is a guide:
By default, Cloudflare uses a system called “Flexible SSL”. In this system, Cloudflare secures the connection between your visitors and Cloudflare, but not the connection between Cloudflare and your website. Not only is this less secure, some websites (notably WordPress) have trouble detecting whether HTTPS is in use, causing all sorts of issues.
The best way to resolve this is by using Full SSL in Cloudflare. This way, the connection between Cloudflare and your website is encrypted, and your w…
6 Likes