Comment by ptx

9 hours ago

Don't you need a cert anyway to secure the connection from Cloudflare to your server?

Cloudflare explicitly supports customers placing insecure HTTP only sites behind a cloudflare HTTPS.

It's one of the more controversial parts of the business, it makes the fact that the traffic is unencrypted on public networks invisible to the end user.