Logo Questions Linux Laravel Mysql Ubuntu Git Menu
 

Is using a CDN possible when you're running a HTTPS website?

I have a website with only home page available through simple HTTP protocol. All other pages are accessible only through HTTP over SSL(https://).

I'm using CDN for home page and very happy with it.

But for me it looks like using CDN for https pages is impossible because of security warnings, especially in IE. My files hosted at CDN are accessible though simple HTTP protocol.

What should I do? How this problem can be solved?

like image 745
Nikita Fedyashev Avatar asked Apr 14 '09 19:04

Nikita Fedyashev


People also ask

How does SSL work with CDN?

Most websites using a CDN make use of a subdomain (e.g. cdn.yourwebsite.com) in order to deliver static assets from. This means that in order to deliver CDN assets over SSL you will need a certificate for the "cdn" subdomain. Therefore you have a few options: Purchase an SSL certificate for cdn.yourwebsite.com.

Does CDN need SSL?

HTTP/2: SSL.com's CDN is automatically HTTP/2-enabled. HTTP/2 is faster than HTTP and requires SSL. Both SSL and faster load times factor into improving your Google search rankings.

Does CDN supports SSL binding?

TLS/SSL certificates. To enable HTTPS on an Azure CDN custom domain, you use a TLS/SSL certificate. You choose to use a certificate that is managed by Azure CDN or use your certificate.

When should you use a CDN?

Anybody who has a website or mobile application that's likely to be requested by more than one user at a time can benefit from a CDN. They are especially useful to large, complex websites with users spread across the globe, and websites or mobile apps with lots of dynamic content.


2 Answers

You need to get a CDN that supports serving files over HTTPS, then use that CDN for the SSL requests.

like image 81
Jon Benedicto Avatar answered Sep 18 '22 17:09

Jon Benedicto


You can do this if their boxes have HTTPS support. What you can't do is use a subdomain of your own domain to cname against the cdn network. Because SSL doesn't work this way.

so https://cdn.tld/mydomain/path/to/file as a mechanism does work (because browsers will verify the cdn.tld ssl certificate correctly)

but https://cdn.mydomain.tld/path/to/file will not.

like image 36
SjH Avatar answered Sep 18 '22 17:09

SjH