TLS and Certificates in Multi-CDN
Synopsis Transport security across CDNs depends on a coordinated certificate lifecycle, subject names, revocation signals, transparency monitoring, and origin authentication. Automation must account for different session behavior and provider controls without creating a service gap during rotation. Scope and goals The transport layer must present a uniform and reliable interface regardless of which CDN serves a connection. Users should see correct certificates, modern protocol support, stable cipher policy, and predictable session behavior. Operations should see an automated lifecycle that avoids expirations, supports rapid revocation, and provides clear observability. The origin path should authenticate CDNs in a way that cannot be replayed from the public internet. ...