The Plan 28 website is a small, static site that I really ought to move to Cloudflare Pages, but... currently it's running on a server that I rent. Since it uses SSL from Cloudflare I wanted to make sure that both the browser to Cloudflare and the Cloudflare to John's Server connections were encrypted.
So I dropped into the Cloudflare Dashboard to check the settings.
Recently, Cloudflare introduced a service that automatically discovers the highest possible security setting for SSL on a site. So I clicked the button...
So, if you have a Cloudflare account go click that recommender button and discover the highest security setting you can use today. And if it's not Full (strict) there are great options like Cloudflare Origin CA.