3 ms·
The only domains vulnerable to attackers are those pointed at the shared hosting provider with this issue. So you can protect your own domain by hosting it with
by ploxiln 9y ago
The only domains vulnerable to attackers are those pointed at the shared hosting provider with this issue. So you can protect your own domain by hosting it with a provider you know does not have this issue. And if a shared provider has this issue, they might have others which compromise the isolation of accounts/domains. And major websites which host themselves are not at any risk.
- mdhardeman 9y agoI agree with your position entirely, save for the "and if a shared provider has this issue, they might..." No one ever told the hosted service providers that they should explicitly guard for TLS SNI names unrelated to any name of the customers they host. That certainly doesn't follow from any obvious logic. I don't believe that a service provider who has this susceptibility is necessarily any more likely to surface other threats.