SSL is the wrong security mechanism to be relying on here. If you want immutable deploys, what you actually want is a hash over the content. When you embed a

SSL is the wrong security mechanism to be relying on here. If you want immutable deploys, what you actually want is a hash over the content. When you embed a hash over the content in your deploy script, you guarantee true immutable deploys: everything will be exactly what you ask for, forever. You're not beholden to SSL for security; you're not beholden to anyone maintaining the servers to "be a good citizen". You just have guarantees. Use a hash over your content.