Protecting web origins with Authenticated Origin Pulls https://blog.cloudflare.com/protecting-the-origin-with-tls-authenticated-origin-pulls/