@Tutanota Although... Note: Keyless SSL requires that Cloudflare decrypt, inspect and re-encrypt traffic for transmission back to a customer’s origin.

I'd stick with your original thoughts 👍