4 ms·

This is a possible work-around, but it adds a lot of complexity to get HTTPS and stuff worked-around. Either the third-party must handle HTTPS for their partner

by d2wa 8y ago

This is a possible work-around, but it adds a lot of complexity to get HTTPS and stuff worked-around. Either the third-party must handle HTTPS for their partners who setup CNAMEs, or the first-party must handle HTTPS and proxy the requests back to the third-party. It’s doable but it will significantly slow things down to the point where even shitty websites would consider it unacceptable.

icebraining 8y ago
The third-party can handle HTTPS just for that particular subdomain, using a separate certificate.
- d2wa 8y ago
  Yes, but this would significantly increase complexity.
  - jefftk 8y ago
    It it really that bad, with automated certificate issuing via Let's Encrypt?