Webmasters Stack Exchange is a question and answer site for pro webmasters. Join them; it only takes a minute:

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

I am serving my own CDN using subdomains for static images only, and want to use a SSL cert on the main website.

For example; https://www.example.com would download images from http://cdn1.example.com, http://cdn2.example.com, http://cdn3.example.com and so on.

The CDN subdomains are non-cookie caching only.

Can I still use a registered SSL cert on the main domain www.example.com?

Will browsers report warnings or errors that content from an unsecured source is being download. Is this practice frowned upon.

p.s. Let's assume all my JS and meta tags are from HTTPS sources. Only images are non-SSL.

share|improve this question
up vote 2 down vote accepted

The browser will not give a full "green padlock" icon and will indicate that while connection is encrypted, there are elements on the page which are not fetched through encrypted connection. This information is only visible if a user clicks a padlock icon.

To answer your question is this a good practice, I would say no, as you should really encrypt all the traffic so your users do not need to worry (if some would), as no one will bother checking which content is unencrypted.

share|improve this answer

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.