When you use a Content Delivery Network (CDN) and want to enable HTTPS, you need to import your certificate there. So you should provide your Private Key to the CDN. Is this secure? I mean CDN can log all of my traffic including my user's login data, and with sharing my private key CDN can decrypt my users' login data and my users aren't safe anymore.
Is this true? what should I do to avoid this besides using HTTPS?