[maknz]

Full SSL requests still terminate at CloudFlare, and would still be vulnerable. It's just that CloudFlare's connection to your origin is also encrypted.

[pmahoney]

Thanks. Wish they had explicitly stated that all SSL modes were affected (unless I missed it...)