4 ms·
"1. Even if you don't do SNI the hostname is on the certificate that the server sends." What if the certificate contains an IP address, instead of hostname(s)
by aplorbust 9y ago
"1. Even if you don't do SNI the hostname is on the certificate that the server sends."
What if the certificate contains an IP address, instead of hostname(s)?
This can alleviate reliance on (third-party controlled, e.g., ICANN) DNS. The blog hints at this reliance (i.e. unencrypted DNS) as an inherent weakness of HTTPS.