StackPath can validate the origin server's SSL certificate when pulling content. A valid SSL certificate is both:
- Issued by a known and trusted certificate authority. Self-signed certificates are not trusted.
- Not expired.
StackPath aborts the connection to the origin server if SSL validation is enabled and the origin's SSL certificate is invalid.
When and how should I use it?
Enable SSL validation when you need strict end to end encryption and your origin server has a valid SSL certificate
Note: User requests for content pass through the CDN before the CDN requests content from your origin. This feature affects how the CDN communicates with your origin. We highly recommend setting up a free EdgeSSL certificate and the EdgeRules to force HTTPS connections to ensure encrypted communication between your users and the CDN.