I too am somewhat confused about Cloudflare. They provide an SSL option called "Flexible SSL", about which Cloudflare itself states:

    [Flexible SSL] is less secure than [even no SSL],
    and could even cause you trouble when you decide 
    to switch away from it[1]

Then why even offer it? Particularly when they have "Full SSL", which can be used with a self-signed certificate, or "Full SSL (strict)", which can be used with Cloudflare's own freely provided "Origin CA"[2].

I don't know if flatjaf's post is just referring to Flexible SSL, but if there are any issues with either of CF's "Full SSL" options I'd be interested to hear them (genuinely, in case that sounds like insincere sarcasm).

[1] https://support.cloudflare.com/hc/en-us/articles/200170416-W...

[2] https://blog.cloudflare.com/cloudflare-ca-encryption-origin/