Comment by anacrolix

Maybe if we weren't letting a third party sign arbitrary certificates for arbitrary domains they wouldn't be reading our passwords.

People don't realise CloudFlare is a MitM-as-a-Service.