This has come up a lot and you probably don’t need to take any action, really really sorry for the confusion. The quick check is if you’ve enable Authenticated Origin Pulls at all, if not, no action. I did a quick check of domains in your account and only see it enabled for the domain ending in a y
.
You can check by going to https://dash.cloudflare.com/d9cad1648edc6bf849bfbd80c470ca73/**YOURDOMAINNAMEHERE**/ssl-tls/origin
. Or, SSl/TLS app → Origin Server tab.
Discussed here, Authenticated Origin Pulls feature.