[bauruine]

>As long as the origin has SSL, the communication is secure end-to-end.

No it isn't. You are doing a MITM.