3 ms·
The actual domain name is https://cloudflare-dns.com/ https://cloudflare-dns.com/ (found by inspecting the cert) Before SNI, every cert had to go to a static p
by Kalium 9y ago
The actual domain name is https://cloudflare-dns.com/ https://cloudflare-dns.com/ (found by inspecting the cert)
Before SNI, every cert had to go to a static public IP address. Everything between you and the TLS terminator had to handle this. As a side-effect, you didn't actually need to know the domain name to get the tunnel, because everything handling the packets was running on the destination IP.
tl;dr: Trickery based on dated TLS quirks.
- scrumper 9y agoThat works fine (the URL directly). The certificate is valid. Entering https://1.1.1.1 https://1.1.1.1 doesn't, but shows the same certificate. Don't really understand what's happening here. Anyway thanks for the info there.
- Kalium 9y agoHow odd. What browser are you using? It appears to be deviating from spec.
- scrumper 9y agoSafari 11.1 (13605.33.1.2). Mac OSX 10.13.4.
- Kalium 9y agoYou are using a slightly more recent version than me, but not significantly. There's no obvious reason there, unless Apple decided to kill support for ip addresses entirely. Is it possible that your machine has been configured in an unconventional fashion?