This may be extremely naive, but why wouldn't a service like AWS CloudFront or any other CDN that supports TLS solve this problem?