We encourage users to use Strict mode which requests and validates a certificate from the origin. It's great that shared web hosting providers and others are s

We encourage users to use Strict mode which requests and validates a certificate from the origin. It's great that shared web hosting providers and others are starting to make it easy to acquire and install a certificate, but that hasn't always been the case. EDIT: We also provide an API that will provision a free certificate for your origin: https://blog.cloudflare.com/cloudflare-ca-encryption-origin/ https://blog.cloudflare.com/cloudflare-ca-encryption-origin/. The certificate is optimized for communication with our edge (essentially just as small a chain as possible, as we don't need the intermediate to walk to the root). Either that or use certbot from EFF/Let's Encrypt.