Comment by maknz

8 years ago

Full SSL requests still terminate at CloudFlare, and would still be vulnerable. It's just that CloudFlare's connection to your origin is also encrypted.

Thanks. Wish they had explicitly stated that all SSL modes were affected (unless I missed it...)