HTTPS-only for Cloudflare APIs: shutting the door on cleartext traffic
blog.cloudflare.com