Thanks for reading. Of the three you list, it was closest to the cookie domain problem: because the CDN domain differs from the app domain, browsers that block third-party cookies by default silently failed to authenticate against the CDN, with no error beyond "video won't play." The fix was a tested fallback that appends a signed token to the manifest/segment requests for those sessions. I didn't cover CORS or cache keys in the write-up, so I can't speak to those from this migration.
