Comment by fiatjaf
Honestly this is the most likely hypothesis, but would be nice to have some more evidence.
Honestly this is the most likely hypothesis, but would be nice to have some more evidence.
I'm sure you've heard this before but Cloudflare isn't really a CDN. CDNs don't have to intercept requests to be useful.
I think what you describe is closer to "TLS terminating reverse proxy", which does need to intercept every request.
If a cdn didn't intercept requests, how else could it work? Literally every cdn is an mitm.