2 ms·
> The requested URL still need to be unencrypted The SSL connection is set up before the HTTP request is sent; that's why the dedicated IP per domain is requir
by dangrossman 13y ago
> The requested URL still need to be unencrypted
The SSL connection is set up before the HTTP request is sent; that's why the dedicated IP per domain is required, since the domain (Host header) is part of the request as well. The URL you're accessing is not sent in the clear.
- cbr 13y agoPartly. On a modern system with SNI the hostname is sent in the clear. This removes the requirement for a dedicated IP per domain with SSL for those users, but until SNI everywhere you still need one.