I think the parent is referring to CloudFlare not requiring SSL between CloudFlare and their customers.<p>An SSL-terminating load balancer is in plaintext between the LB and your servers, whereas CloudFlare Universal SSL can be <i>plaintext over the internet</i>.<p>Since the latter still shows users it&#x27;s a secure connection, it would be reasonable for CF to require HTTPS between themselves and their customers. Last time I asked CF about this, their answer was &quot;yes, but not our problem&quot;.