Comment by jgrahamc

There's a good explanation of this on the Cloudflare blog here: https://blog.cloudflare.com/stronger-than-a-promise-proving-... The relay server can't see the HTTP request contents as it is encrypted using the key of the gateway (i.e. Google).