True -- if the keyless server is down, we can't even complete the ssl handshake for new clients. The keyserver is stateless, so you can have a bunch of keyserv

True -- if the keyless server is down, we can't even complete the ssl handshake for new clients. The keyserver is stateless, so you can have a bunch of keyservers (which don't need to be particularly near your own infrastructure) to deal with this, though. There's also session caching (tickets or session id), so this only affects people who haven't connected to a cloudflare site recently. It IS an issue, but it's not that hard to deal with.