> strips SSL from every connection before passing it onto origins

What do you mean? You definitely can serve with TLS end-to-end with CF, it's called Full (strict) mode, or something like that.

▲

thesh4d0w an hour ago | parent | next [-]

They're still decrypting on their nodes, and then re-encrypting before sending to the origin. There's no getting around the fact they can see the traffic as plain text.

	▲	notanazzi 31 minutes ago \| parent [-]
		And they leaked said decrypted traffic at one point...

▲

skinfaxi an hour ago | parent | prev [-]

And they issue certs in your name, right?