[whafro]

That's interesting. Have you tried it the other way around?

- domain.com ALIAS sub.herokussl.com - www.domain.com CNAME domain.com

[nate]

Amazon doesn't like that Alias either. A friend on mine, Scott, just figured out though that you can point your Alias record at any ELB even outside your account:

https://twitter.com/scottvdp/status/341604885600534530

So I can make an Alias record to the ELB that heroku is pointing at with their SSL CNAMES.