LWN.net Logo

Virtual Hosts and SSL

Virtual Hosts and SSL

Posted May 1, 2012 5:07 UTC (Tue) by pr1268 (subscriber, #24648)
In reply to: Happy Run Some Old Browsers Day by tialaramex
Parent article: Buculei: A history of Mozilla browsers design

I thought that the SSL version of virtual hosts didn't (doesn't) exist because of a chicken-or-the-egg situation in which the SSL is underneath the DNS layer (something to do with an IP address resolving to possibly a different host/server name). Or something similar; my memory may be a little cloudy on that...


(Log in to post comments)

Virtual Hosts and SSL

Posted May 1, 2012 6:03 UTC (Tue) by dlang (✭ supporter ✭, #313) [Link]

that is the problem with SSL, but TLS adds an option for the client to tell the server what site they want before the SSL negotiation take place. This feature is called SNI (Service Name Indicator or something like that)

unfortunately there are still a lot of old browsers out there that don't support it (IE6 among them) and as a result, almost nobody uses the option.

Virtual Hosts and SSL

Posted May 1, 2012 10:12 UTC (Tue) by cortana (subscriber, #24596) [Link]

FYI it's "server name indication". I believe the only significant client that can't use it is Internet Explorer on Windows XP, due to MS' unwillingness to backport the SNI feature to XP's SSL library.

Virtual Hosts and SSL

Posted May 1, 2012 10:46 UTC (Tue) by nye (guest, #51576) [Link]

>I believe the only significant client that can't use it is Internet Explorer on Windows XP, due to MS' unwillingness to backport the SNI feature to XP's SSL library

Also Chrome on Windows XP, because the Chrome team like to use the native platform features where possible.

(What's that you say? They should bundle their own libraries? :P)

Copyright © 2013, Eklektix, Inc.
Comments and public postings are copyrighted by their creators.
Linux is a registered trademark of Linus Torvalds