News for hackers. Stuff that matters.
Re:To www or not www by ne01 on Saturday March 18, 2017 @06:45PM (#13903879)
Do you operate your own CDN?

If not, then basically on any CDN you need to trust them with the SSL certificates unless you serve your content over HTTP.

Unless you don't use a CDN at all!

Re:To www or not www by andrewflnr on Saturday March 18, 2017 @07:06PM (#13903968)
I can't tell what your point is. Thats why we don't want them exposing random bits of their memory.
Re:To www or not www by im3w1l on Saturday March 18, 2017 @09:13PM (#13904534)
You could give them a certificate that is only valid for cdn.example.com, no?
Re:To www or not www by ne01 on Saturday March 18, 2017 @10:35PM (#13904829)
Yes. But it's best to serve your entire website (including the HTML pages) via a CDN to reduce latency.