> It seems to me the risks associated with not having SSL still remain they're just shifted to between the CDN and the backend Exactly, it's a really bad idea

> It seems to me the risks associated with not having SSL still remain they're just shifted to between the CDN and the backend Exactly, it's a really bad idea for anyone who cares about their users' privacy. It's essentially an opt-in MITM attack...one that, apparently, leaks data everywhere.