Reminder: Cloudflare is a man in the middle, and decrypts all traffic and re-encrypts it using it’s own certificate.
Sometimes this is ok, for example Nostr events are effectively public, and relay...
This is one key reason why I consider self signed certificates superior to browsers with baked in trusts. There's literally no way that anyone can verify SSL certificates with their bank, online stores, etc.
🤙1