Absolutely feel you, kinda similar situation at work atm. What frustrates me the most is that none of the IT personnel understands my frustration because most are not in that kind of IT community and don’t share the ideas behind all that. Just here to earn a dollar, whatever system we’re working on. No intrinsic desire to make the world better or at least more secure, none of that. Just robots and bureaucrats.

Unnecessarily anatomically correct I guess? We had ducks when I was little and it just now came back to me that I witnessed that once. Thanks but no thanks

You’re right, forgot that you can just not encrypt on your servers end and use cloudflare to do that for you, especially when used as CDN

I’d argue that the certificate authority does not have the ability to decrypt your communication because of the nature of private and public key mechanism during the whole TLS certificate procedure. You do not send your web servers private key to cloudflare when requesting a certificate.

That would actually be pretty wild…

Other then that you’re probably right.