thanks for this info. it would've been nice if they'd made a blogpost about this and put it on the front page or something, not just a response in a matrix room.
that way people can help and make suggestions. I really dont think a cloudflare mitm is necessary for DDOS protection. A DDOS protection service with reverse proxy would be fine, there's likely many companies that have this kind of service that dont require MITM like CF, or they could probably self-host one.
sorry, I worded it wrong. ill edit it. I meant to say there are plenty of solutions for DDOS protection with a reverse proxy. Probably in such a way that doesn't require a MITM.