5 ms·
"In the past it has not been possible to serve SSL requests for multiple domains from the same IP address." This is a plain lie. This article just describes a
by mrb 16y ago
"In the past it has not been possible to serve SSL requests for multiple domains from the same IP address."
This is a plain lie. This article just describes a technology that has been available for years: using Subject Alternative Names to declare all the host names in a single X.509 certificate. As far as I can tell, real CAs have been signing these types of certs for years (one random example: https://www.rapid7.com https://www.rapid7.com is valid for "www.rapid7.com" and "rapid7.com" without using a wildcard cert). The article call these certs "UCC SSL certs" but it is nothing more than a marketing name to sell Subject Alternative Names.
- adamcharnock 16y agoI see, this was just down to a lack of awareness on my part when I wrote the article. It was an assumption I based on the fact that I just hadn't seen these certificates around before now. It was certainly not my intention to mislead.
- siculars 16y agoI have a bit of a problem with people, like you, who will call someone a liar. lie, noun, an intentionally false statement. To insinuate that someone is a liar used to be a considerable personal slight and writing it here makes it libelous. Have you proven intention? Would it not be more polite to say that the OP was simply mistaken. I would kindly ask the OP to rewrite the offending sentence, perhaps like so "In the past it has been difficult to serve SSL requests for multiple domains from the same IP address." That this comment has received a number of up votes is disconcerting. Where is the decorum oft afforded the HN community?
- mrb 16y agoI agree. My apologies to adamcharnock. I should have said "inexactitude" instead of "lie". I did not choose the right word when typing my reply.