Comment by juliend2

> strips SSL from every connection before passing it onto origins

What do you mean? You definitely can serve with TLS end-to-end with CF, it's called Full (strict) mode, or something like that.