There's a 'new' TLS (SSL) feature called Server Name Indication, which allows more than one cert per IP address. http://en.wikipedia.org/wiki/Server_Name_Indic

There's a 'new' TLS (SSL) feature called Server Name Indication, which allows more than one cert per IP address. http://en.wikipedia.org/wiki/Server_Name_Indication http://en.wikipedia.org/wiki/Server_Name_Indication It has surprisingly high client support, but obviously isn't universal enough for you to rely on it working. With a protocol which doesn't require a certificate, you're still subject to MITM attacks. These are particularly viable on public wifi networks -- just set up a rogue access point.