If I have domain XXX with GoDaddy and it is configured to forward to YYY that is not with GoDaddy. If turn on URL masking the Browser URL shows domain XXX instead of domain YYY.
The problem with this is that xxx.com shows that the connection is not secure as there is no SSL cert for xxx.com.
I was told that Cloudflare can provide SSL Proxy SSL to handle the SSL termination and serve content from zzz.com.
Is this possible and how do I configure this? If it is possible what Cloudflare subscription do I need.
No, I am afraid the site needs to be secure before you add it to Cloudflare.
Cloudflare only provisions a proxy certificate and does offer additionally a certificate for installation on your server (just like Let’s Encrypt), but the site itself needs to be secure first.
In this case domain xxx.com does not have a site associated with it. It is just a domain whose A record is pointing to Parked in GoDaddy. The URL the site is redirected does however have SSL protection.