[TAG] HTTPS question

Jay R. Ashworth jra at baylink.com
Thu Sep 1 02:12:53 MSD 2005


On Wed, Aug 31, 2005 at 02:44:03PM -0700, mso at oz.net wrote:
> Is there any way to have multiple HTTPS domains on the same IP/port?  The
> mod_ssl FAQ says name-based virtual hosts are impossible with HTTPS [1]. 

Correct.  You can't have more than one SSL server per IP address,
because the certs are IP based, not domain name based.

They have to be, if you think about it, because you can't spoof IP [1]
the way you can spoof DNS.

Cheers,
-- jra

[1] unless you manage a backbone.  :-)
-- 
Jay R. Ashworth                                                jra at baylink.com
Designer                          Baylink                             RFC 2100
Ashworth & Associates        The Things I Think                        '87 e24
St Petersburg FL USA      http://baylink.pitas.com             +1 727 647 1274

	"NPR has a lot in common with Nascar... we both turn to the left."
		- Peter Sagal, on Wait Wait, Don't Tell Me!





More information about the TAG mailing list