Full exryption mode and MITM attack

Website, Application, Performance Security
2

For the reasons explained here, you need to use “Full (strict)” (or “Strict”) and a valid SSL certificate on your origin. Nothing else is secure.