I thought it was a man in the middle. Although I think chipmixer provide their own certificate on their server and point cloudflare to that so stuff MAY be encrypted. I access most things via tor when possible (and neccary - when not necessary I use a vpn instead) as cloudflare also have an office in London afaik...