[leesalminen]

That's optional though, right? IIRC, you could still have SSL termination occur on your end but you lose tons of features which would require CF MiTM.

[CiPHPerCoder]

Yes, that's optional.