Take the 2-minute tour ×
Server Fault is a question and answer site for professional system and network administrators. It's 100% free, no registration required.

I have been considering getting an EV SSL certificate for my website, but I have some concerns about how this will interact with our planned architecture.

We were planning to serve our static files from Amazon's CDN (cloudfront) backed by an Amazon S3 bucket. My understanding is that as long as you use the full cloudfront domain rather than attempting to use a custom CNAME, ssl over cloudfront will be completely transparent to our users as long as we use the appropriate scheme when generating links.

With an EV SSL certificate, will everything still be transparent to users? We don't want to invest in getting a green bar just to lose it because we're linking content from another domain only authenticated by vanilla ssl.

share|improve this question
add comment

1 Answer

up vote 2 down vote accepted

I've used an EV cert on a couple of sites that get image content pulled from an alternate site. In my example config, https://site1.domain1.com/ is the main web site that users interact with and images are being delivered from https://site2.domain2.com/. At a basic level, this looks like the same type of site configuration you are talking about.

As long as everything is SSL encrypted, things should work as expected. If you have any absolute URLs pointing to http:// on the main site, you will lose the bar. I can't say if an accidental placement of an absolute http link to the secondary site will cause a problem (and I could only test this on my live sites and then I'd be looking for new employment :)

share|improve this answer
    
The certificate on the CDN server must also be valid and signed by a root the browser trusts. –  Terence Johnson Aug 12 '11 at 18:29
add comment

Your Answer

 
discard

By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.