Announcing Keyless SSL
So the communication between Cloudflare and the actual SSL key holder is secured by… what?  Another key?  In that case, any compromise of Cloudflare’s key is the same as a compromise of the original SSL key (at least in the short term).