Skip to main content

You are not logged in. Your edit will be placed in a queue until it is peer reviewed.

We welcome edits that make the post easier to understand and more valuable for readers. Because community members review edits, please try to make the post substantially better than how you found it, for example, by fixing grammar or adding additional resources and hyperlinks.

2
  • why would a CDN be affected by a site policy? how secret is the stuff on the CDN? can you not use the integrity attrib on pages loading CDN resources? I also don't see the problem with sha in a cipher suite, but that's something else... Commented Aug 11, 2016 at 20:36
  • Because ALL traffic passes through the CDN (think of it as a reverse proxy) - public TLS connections are made to the CDN. It's not possible for the outside world to connect directly to the origin. Commented Aug 11, 2016 at 20:41