Feature Overview

CDN provides HTTPS-related features in the table below to meet requirements in different scenarios.

Feature	Description
Enabling HTTPS	Enable HTTPS for encrypting data that is transmitted between a client and a CDN point of presence (POP).
Enabling HTTP2	Compared with HTTP/1.1, HTTP/2 supports more features, such as multiplexing, HTTP header compression, request priority classification, and server push. HTTP/2 fixes issues on HTTP/1.1, and the protocol performance is optimized.
Force redirection	If you want to force the requests sent from clients to CDN POPs to be handled over HTTP or HTTPS, enable the force redirection feature.
OCSP stapling	After the OCSP stapling feature is enabled, CDN queries certificate status information and caches query results on its servers. This helps increase the HTTPS response performance.
NCCA-based HTTPS configuration	National commercial cryptographic algorithms of China (NCCAs) are cryptographic algorithm standards and application specifications recognized and released by State Cryptography Administration of China. Some of the cryptographic algorithms have become international standards.
TLS version configuration	Transport Layer Security (TLS) is used to ensure data security and data integrity during Internet communication. You can configure different versions of TLS protocol for different accelerated domain names based on your business requirements.
Batch HTTPS certificate configuration	CDN supports HTTPS-based acceleration. In the CDN console, you can upload an HTTPS certificate and bind the certificate to domain names to enable encrypted data transmission.
HSTS configs	HSTS is a method used by websites to declare that they can only be accessed using a secure connection (HTTPS). By declaring HSTS, Web sites can force clients (e.g., browsers) to use only HTTPS to the server, deny all HTTP connections, and prevent users from accepting insecure SSL certificates, reducing the risk that their first request will be intercepted.
List of compatible SSL/TLS encryption suites	Cipher suites are a combination of algorithms used to negotiate security Settings during the SSL/TLS handshake. After the exchange of Client Hello and Server Hello messages, the client sends the list of supported cipher suites and the server responds by selecting cipher suites from the list.

Content Delivery Network

HTTPS Overview