>>51075484NGNIX would have to include the header on replies, right? Or is it something that can be enabled from the cloudflare control panel? Either way, since putting the site in front of cloudflare allows HTTPS for end users, why not?
By the way, before moot left, did he ever confirm whether or not it was end to end HTTPS? Because you can enable HTTPS on cloudflare for the connection between cloudflare and your end users without having HTTPS communication between your server and cloudflare.