[micro-ram]

I always hoped CAcert.org would have gotten us there sooner, but that never happened. Agreed letsencrypt.org will radically change the cert market. I have already stopped renewing some personal certs and am using CloudFlare free SSL with a self-signed cert on the origin.

[dwild]

Does cloudflare check that your self-signed cert has the right signature? MITM would still be possible if it doesn't.