Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Automatic ssl/tls timeline clarification #16414

Closed
wants to merge 3 commits into from
Closed
Changes from all commits
Commits
File filter

Filter by extension

Filter by extension

Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
19 changes: 13 additions & 6 deletions src/content/docs/ssl/origin-configuration/ssl-modes/index.mdx
Original file line number Diff line number Diff line change
Expand Up @@ -31,13 +31,20 @@ If your zone has not been migrated yet, you will only have [Custom SSL/TLS](#cus

Automatic SSL/TLS uses the [SSL/TLS Recommender](/ssl/origin-configuration/ssl-tls-recommender/) to identify and apply the most secure encryption mode for your website. It continuously assesses your traffic to determine if a more secure option is needed based on your origin certification or capabilities, and updates your settings automatically to ensure the highest level of security for your domain.

Cloudflare is enabling Automatic SSL/TLS on the following dates:
Cloudflare is rolling out Automatic SSL/TLS on the following dates:

| Plan | Using SSL/TLS recommender? | Grace period ends |
| -------------- | -------------------------- | ----------------- |
| Non-Enterprise | Yes | September 9th, 2024 |
| Enterprise | Yes | October 7th, 2024 |
| All plans | No | October 21st, 2024 |
- **September 9, 2024**: All non-Enterprise plans that are using the SSL/TLS Recommender and have not opted out will be migrated. Automatic upgrade scans for these zones will begin on or after this date.
- **October 7, 2024**: All Enterprise plans that are using the SSL/TLS Recommender and have not opted out will be migrated. Automatic upgrade scans for these zones will begin on or after this date.
- **October 21, 2024**: Zones created on or after this date will be enrolled in the Automatic SSL/TLS.
- **November 4, 2024**: The Recommender and Recommender API will be fully decommissioned. After this date, we will begin migrating zones that have never interacted with the Recommender or Automatic Upgrader. If you want to opt-out at this time, you can disable the Automatic Upgrader in the UI or API.
- **December 4, 2024**: All non-Enterprise zones that have never used the Recommender or Automatic SSL/TLS will be migrated. Automatic upgrade scans for these zones will begin on or after this date.
- **January 6, 2025**: All Enterprise zones that have never used the Recommender or Automatic SSL/TLS will be migrated. Automatic upgrade scans for these zones will begin on or after this date.

:::note

If your zone is created before October 21, 2024 and also not using the SSL/TLS Recommender, it will not be automatically upgraded to a different encryption mode.

:::

#### Opt out single zone

Expand Down
Loading