diff --git a/config/assets_cdn.yml b/config/assets_cdn.yml
index 8f22209..5638a59 100644
--- a/config/assets_cdn.yml
+++ b/config/assets_cdn.yml
@@ -5,5 +5,5 @@ development:
 production:
   enabled: true
   host: cdn.bikebike.org
-  protocol: http
-  fallback_protocol: https
+  protocol: https
+  fallback_protocol: http
diff --git a/config/environments/production.rb b/config/environments/production.rb
index 562318d..49b660a 100644
--- a/config/environments/production.rb
+++ b/config/environments/production.rb
@@ -66,7 +66,7 @@ BikeBike::Application.configure do
 	# application.js, application.css, and all non-JS/CSS in app/assets folder are already added.
 	# config.assets.precompile += %w( search.js )
 	config.assets.precompile += %w(*.png *.jpg *.jpeg *.gif)
-	config.action_controller.asset_host = "http://cdn.bikebike.org"
+	config.action_controller.asset_host = "https://cdn.bikebike.org"
 
 	# Ignore bad email addresses and do not raise email delivery errors.
 	# Set this to true and configure the email server for immediate delivery to raise delivery errors.