We have 3rd-Party CDN in front of Financial/Banking APIs which involves sensitive data, login, access token, cookies, etc. We would like to leverage WAF and SSL Inspection capability of CDN. This requires SSL Offloading at CDN. How to avoid/mitigate the risk of sensitive data leakage to 3rd-Party CDN?

  • 1
    You can't mitigate the risk. You can manage it using a written agreement with the CDN.
    – vidarlo
    Commented May 12 at 6:27


You must log in to answer this question.

Browse other questions tagged .