| severity | Important |
|---|---|
| pillar | Security |
| category | SE:07 Encryption |
| resource | Content Delivery Network |
| resourceType | Microsoft.Cdn/profiles/endpoints |
| online version | https://azure.github.io/PSRule.Rules.Azure/en/rules/Azure.CDN.HTTP/ |
Unencrypted communication could allow disclosure of information to an untrusted party.
When a client connect to CDN content it can use HTTP or HTTPS. Support for both HTTP and HTTPS is enabled by default. When using HTTP, sensitive information may be exposed to an untrusted party.
Consider disabling HTTP support on the CDN endpoint origin.