To be secure you need SSL on your origin (or a Cloudflare tunnel). Using Cloudflare SSL to front a non-SSL origin is not secure as the connection between Cloudflare and your origin would be unencrypted. You would be deceiving your users into believing their data was secure when it wasn’t.
Thank you so much for informing me of that. So I’m confused; what would be the purpose of signing up for cloudflare’s sll if your site already has sll? I’m trying to get sll for free for my site, which does not exchange sensitive info. Is that possible? If so, how?
In any case, do you know why my site went down after switching my nameservers to cloudflare? There’s no DNSSEC for it.