We don't use https on cloudfront, we use http, with authentication done before any xml or url is provided for content. -- by we, I mean the stuff I've worked on. Eventually, if needed, we'll start encrypting our streams and using https - but right now, with our channels being private in development, for trusted users, security doesn't have to be our main concern.
