Linked by Thom Holwerda on Tue 25th May 2010 21:37 UTC
Thread beginning with comment 426802
To view parent comment, click here.
To read all comments associated with this story, please click here.
To view parent comment, click here.
To read all comments associated with this story, please click here.
RE[2]: I'll drop any cleartext - vhosts
by jabbotts on Thu 27th May 2010 18:44
in reply to "RE: I'll drop any cleartext in a heartbeat"
vhosts. Multiple sites/domains sharing a single IP. When the browser asks for the IP, it's header lists the domain it wants and the webserver presents domain/IP.
It would be much easier if vhosts could share an IP without sharing an SSL cert. The certificate is bound to the domain name not the IP it's currently hosted on. This may reduce the trust in certificates though as now your still sure of cert/domain but your not sure of location.




Member since:
2007-09-22
I know of very little concerns with using https.
1. you need a dedicated address, this problably means: ipv4-address, we are running out. Not good. :-( I would love to see websites adopt: we have https for IPv6 users only. :-)
2. their needs to be enough entropy to do the encryption. Banks recently had DOS-attacks and the https-sites were really slow, not because of CPU-bound encryption (for which possible they already have extra hardware), but because of entropy shortage.