---
title: Step 4 – HTTPS/TLS
description: "Deflect can automatically serve your website over an encrypted HTTPS/TLS connection. To learn more, [read this guide](https://deflect.ca/docs-category/control-panel-dashboard/https-tls-support/). If your website already supports HTTPS/TLS connection, you still need to configure it on Deflect. You can use your existing certificates, or generate new…"
url: "https://deflect.ca/docs/step-4-https-tls/"
updated: "2025-08-27"
category: "Registration & Setup Process"
tags:
  - revised
---

# Step 4 – HTTPS/TLS

Deflect can automatically serve your website over an encrypted HTTPS/TLS connection. To learn more, [read this guide](https://deflect.ca/docs-category/control-panel-dashboard/https-tls-support/).

If your website already supports HTTPS/TLS connection, you still need to configure it on Deflect. You can use your existing certificates, or generate new Let’s Encrypt certificates for use on the Deflect servers.

![https_tls_configuration.png](https://deflect.ca/wp-content/uploads/2025/07/https_tls_configuration-1024x560.png)

### Full TLS Encryption

We strongly advise choosing the full TLS encryption mode if your website already supports HTTPS/TLS connection. This guarantees that traffic is encrypted all the way from the visitor's browser to Deflect and to your server. However, Deflect will serves as the TLS termination point.

### Flexible TLS Encryption

If your site doesn't not support HTTPS, this alternative can be chosen. The option for site admins who would like Deflect to implement a HTTPS certificate for your server. Nonetheless, since the traffic between your origin server and Deflect would not be encrypted, there might be potential security risks.

### HTTP Only Mode

Unless you have a substantial reason to support only HTTP connection, this option is not suggested. It's key to note that modern browsers will label your site as unsecured in the address bar.

### Public TLS Certificates

Deflect offers the choice to produce a complimentary Let's Encrypt TLS certificate for your website. Unless there are certain demands necessitating the use of your current TLS certificates.

![public_tls_certificates.png](https://deflect.ca/wp-content/uploads/2025/07/public_tls_certificates-1024x309.png)