The Power of CloudFlare

In a world post Snowden, CloudFlare is already the man in the middle. They recognize that you're logging in and so they make a call out to Troy Hunt's site. And then if that user ID password is in there, then they will add a CF password-poned header to the call. But does that not feel dirty to you guys at all? Like that sort of scares me.