diff --git a/docs/source/start.rst b/docs/source/start.rst index 2490cb6ef..8109dd73e 100644 --- a/docs/source/start.rst +++ b/docs/source/start.rst @@ -57,6 +57,30 @@ sure to read that before linking to the MathJax CDN server. To see how to enter mathematics in your web pages, see `Putting mathematics in a web page`_ below. +Secure Access to the CDN +------------------------ + +When the the MathJax CDN is accessed via the address +``http://cdn.mathjax.org``, data is downloaded over a regular, insecure +HTTP connection. This introduces a security risk, since it is +possible a hostile 3rd party could intercept the MathJax program data, +and replace it. This is sometimes called a +`man-in-the-middle `_ attack. + +To prevent such attacks, it is necessary to access the MathJax CDN +over a secure HTTPS connection. This can be easily done by using the +following `` + +Currently, the Amazon Cloudfront service used by the MathJax CDN does +not support the use of a human-friendly name like cdn.mathjax.org for +secure connections. However, this address is stable and safe to use. + Installing Your Own Copy of MathJax ===================================