Re: wrong e-mail !!!!!!!!!!!!!!!!!!!!!!!

Robert Uzgalis <[email protected]> Mon, 14 Jul 2008 13:13:22 -0700
Newsgroups gmane.comp.apache.mod-ssl.user
Message-ID <[email protected]>
One small comment.  I have tried for years to get off this mailing list.
I have sent my request and it has always been effective, for say a month 
or so,
then I get put back on the mailing list.  And it keeps coming.  My 
solution was
to add it to my spam filter.  It doesn't bother me that way and 
occasionally I drop in
to see what the latest complaint is.

In this case I couldn't agree with the message more.  Perhaps the tone 
is not quite right.
Somebody ought to fix mailing-list software so that once you are off you 
are really gone.
It is true that [email protected] ought to ask to be taken off the 
list; but it won't help much I'm afraid.

BUZ

[email protected] wrote:
> stop stop  sending me
> this bs , i have no idea  who are you !!!!
> stop !!!!!!!!!!!!!!!
>
>     -------------- Original message from Dave Paris
>     <[email protected]>: --------------
>
>
>     > It seem like you might be confusing "shared infrastructure" with
>     > "single ip". As others have said, you need a distinct address
>     for each
>     > SSL-enabled httpd or proxy, although they can reside on the same
>     hardware.
>     >
>     > A good example of this is the typical configuration for larger
>     server
>     > farms. You find multiple High Availability load balancers in the
>     DMZ for
>     > both http and https using something like ha/keepalived for
>     linux. These
>     > proxy the incoming request back into private address space. The SSL
>     > proxies terminate the SSL connection and broker the request on
>     behalf of
>     > the user and everything goes to the private address space in
>     plain http.
>     > This allows each of the _real_ webservers to achieve better
>     > performance since the SSL overhead is not present.
>     >
>     > While you can use Apache as an SSL-terminating proxy, I find I get
>     > better performance, lower memory utilization and easier
>     configuration
>     > using Pound ( http://www.apsis.ch/pound/ ). Using keepalived, I
>     have
>     > multiple public IP addresses floating between several hosts and
>     pound
>     > binds https to those addresses.
>     >
>     > Hope that adds a bit of additional clarity,
>     > Dave
>     >
>     > Cuesta Gilles sent forth:
>     > > So what about this ?
>     > > "*MULTIPLE CN (SAN) SERVER CERTIFICATES*
>     > >
>     > > This type of certificate (also called /Subject Alternative
>     Name/ (SAN) )
>     > > enables to secure not only one website but a large number of
>     sites (a
>     > > list of sites) hosted on a shared infrastructure (server with
>     multiple
>     > > names, reverse proxy). Ideal to secure multiple brands of a
>     corporation.
>     > > One certificate per hardware is required."
>     > >
>     > > http://www.tbs-certificats.com/index.html.en
>     > >
>     >
>     ______________________________________________________________________
>
>     > Apache Interface to OpenSSL (mod_ssl) www.modssl.org
>     > User Support Mailing List [email protected]
>     > Automated List Manager [email protected] 
>