Keep in mind that you can "add and remove SSL" without #Cloudflare too.

These days supposedly it's at least easier to catch this being done, but who checks the CT logs?

#DPKI is the only way to solve this.

https://okturtles.org/dpki/

@pojntfx

RT: https://mastodon.social/users/pojntfx/statuses/115266889590878748