Do we handle our own certs or do you have a proxy in front of the sprites that can do auto ssl stuff?

We handle all the SSL stuff. Sprites run on the same Anycast network with the same control plane as Fly Machines, which are built for srs bzns.