Are you talking about adding mTLS between cloudflare and the origin? If the origin doesn’t check CloudFlare’s TLS cert, an invalid cert wouldn’t block a scanne

Are you talking about adding mTLS between cloudflare and the origin? If the origin doesn’t check CloudFlare’s TLS cert, an invalid cert wouldn’t block a scanner like this.