4 ms·
There should be a rule that every server can only have one ip address at most. Then introduce a new version of ssl which also works with a non dedicated ip. Thi
by bluelu 16y ago
There should be a rule that every server can only have one ip address at most.
Then introduce a new version of ssl which also works with a non dedicated ip.
This would release millions of ip addreses.
- blueben 16y agoI'm resisting the urge to simply mock you here. What you are suggesting is technically infeasible, and does not address the issue in any manner of significance. Congratulations, you liberated a few million IPs and delayed the IPv6 migration by a few days. Actually, since you freed individual IPs instead of entire blocks, you really didn't delay the migration at all but I thought I would be generous. I don't have any clever or pithy quotes about this, so I'll have to wing it: If you have no expertise in the problem area, and you think you've come up with a simple solution that all the experts somehow missed, then you should probably assume you don't understand the problem and are wrong.
- A1kmm 16y agohttp://en.wikipedia.org/wiki/Server_Name_Indication http://en.wikipedia.org/wiki/Server_Name_Indication Of course, as has been pointed out already, even if all SSL hosting servers with one IP per certificate consolidated their certificates, it wouldn't help much because network routing relies on routing tables not being too big, so it is only useful if entire blocks can shared. I'd say that deploying IPv6 widely will actually be easier than trying to salvage allocated IPv4 address blocks.