Hi Michael,
On Wed, Feb 10, 2016 at 04:10:45PM +0000, Michael Stevens wrote:
I've been using multiple IPs for SSL. Does anyone
who pays more
attention to these things know if SNI
(
https://en.wikipedia.org/wiki/Server_Name_Indication) is a workable
alternative these days?
One thing I have found is that you need a fairly modern Python for
the SSL library to support SNI. It works from Python 2.7.9. Debian
wheezy, for example, has Python 2.7.3.
A lot of web scrapers and similar are written in Python, for example
various "planet" software, so switching to a cert with SNI can drop
you off some planets and the like:
https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=813313
Cheers,
Andy
--
http://bitfolk.com/ -- No-nonsense VPS hosting
"The electric guitar - like making love - is much improved by a little
feedback, completely ruined by too much." — The League Against Tedium