Certificate per request
that's just OTR
Of course, so we have another global failure/censorship point besides Cloudflare…
that's just OTR