Networking

Recently, in a forum I frequent, there was a discussion where developers were considering adding CDNs to their software. This idea immediately raised red flags for me, and as I dug deeper into the topic, it reinforced my opposition to using CDNs in production environments. The inherent risk of allowing a production website to send data out over port 80 (HTTP) or port 443 (HTTPS) goes beyond just external dependencies. The most important thing to remember is: Every external connection is a potential vulnerability. While CDNs are often marketed as a way to improve speed and reduce latency, they introduce a third-party dependency that can compromise the security, reliability…