Comment by dhab

Could someone help me understand. I looked at: https://developers.cloudflare.com/ssl/origin-configuration/s... it seems to support multiple modes.

I didn't quite get if Automatic TLS (https://developers.cloudflare.com/ssl/origin-configuration/s...) could use plain transfers.

So:

* Is it insecure by default or you have to be intentionally insecure?

* Why would anyone pick the flexible/potentially-insecure option?