title: Django SSL cert and static media
body: <p>I'm building a Django app that will need SSL on all user-facing pages. On other projects where SSL was required I've run into complications when serving media files from a different virtual host on the same server. For instance the page is: <a href="https://www.mysite.com" rel="nofollow">https://www.mysite.com</a> but it's referencing <a href="http://media.mysite.com/css/screen.css" rel="nofollow">http://media.mysite.com/css/screen.css</a>, and the browser subsequently displays security warnings to the user.</p>
  
  <p>My understanding is that it's Django best practice to keep static files on at least their own virtual host, which -- as far as I know -- requires a subdomain like media.blahblah.com.  </p>
  
  <p>Obviously there's plenty of Django apps on SSL, so I must be missing something. Any advice on how this is managed?</p>