Re: rfc2487bis-04: Failed negotiations & virtual hosting
dean gaudet <[email protected]> Tue, 17 Oct 2000 09:26:11 -0700 (PDT)
| Newsgroups | gmane.ietf.apps-tls |
|---|---|
| Message-ID | <[email protected]> |
On Thu, 5 Oct 2000, Gregory Neil Shapiro wrote: > 2. As Paul Hoffman and I discussed at IETF, there may be a virtual hosting > problem that will necessitate a change. For example, smtp.gshapiro.net > does virtual hosting for about 50 domains. If a client expects the > certificate CN and the hostname to match, there needs to be some way to > communicate that information. HTTP has HTTP/1.1 or the Server: line to > indicate the requested server. SMTP will need the same if the server is > to be able to determine which certificate to send. this is really a deficiency in TLS, and it should really be fixed there... rather than hoping that every application protocol will notice that virtual hosting is a Good Thing and get another extension to handle it. -dean