Today openshift adds the console/api TLS cert onto the amazon ELB which fronts the console/api machines. I'm told (through the grapevine which no one really knows the truth of) that this is because of some "IE11 CORS bug." But I know little else.
It might be this issue:
(It might not, I really don't know)
I would like to stop loading the cert into the ELB. This makes cert management much harder. If this can be fixed in the console I would very strongly like to fix it there.
This is no longer an issue in 4.1 since the console uses a proxy and does not rely on CORS. We've also dropped support for IE 11 in 4.1. We have no plan to change this in the 3.x console.