4 ms·
I think one interesting point from a compliance perspective is the technical requirement to provide a cdn with your private certificates. It’s not a showstopper
by sbr464 8y ago
I think one interesting point from a compliance perspective is the technical requirement to provide a cdn with your private certificates. It’s not a showstopper, but it’s definitely a point to consider. I wish it could somehow be removed from the equation, similar to how you don’t need to provide your certs to a managed dns provider.
- nerdbaggy 8y agoThis is why a lot of websites uses a separate domain for assets. Separate cert and keeps cookies from leaking. Then at this point they can already change the content of what is being served so them having the private key doesn’t really do much