[conradludgate]

The website owner (or cloudflare in this case) has the keys to decrypt the client hello. That's necessary for routing information.

[hzwanip]

You're right, sorry! I got confused myself.