looking for best practice for crossdomain.xml in combination with https and facebook

hi guys,

as i could not find any clarification in the manuals or good working examples of how to resolve this, i dare asking again for any hints on this topic:

we are running a facebook app with a combination of html/js/flash and unity content. if using the app without safe browsing enabled everything works like a charm, as well for local testing with connecting our azure server. but through https we receive crossdomain.xml not found erros, though its correctly placed and can be reached from the outside world.

any help on that topic highly appreciated!
thanks in advance,
marco

 

bump