Re: rfc2487bis-04: Failed negotiations & virtual hosting

[dean gaudet <dgaudet-list-ietf-apps-tls@xxxxxxxxxx>]

On Thu, 5 Oct 2000, Gregory Neil Shapiro wrote:

> 2. As Paul Hoffman and I discussed at IETF, there may be a virtual hosting
>    problem that will necessitate a change.  For example, smtp.gshapiro.net
>    does virtual hosting for about 50 domains.  If a client expects the
>    certificate CN and the hostname to match, there needs to be some way to
>    communicate that information.  HTTP has HTTP/1.1 or the Server: line to
>    indicate the requested server.  SMTP will need the same if the server is
>    to be able to determine which certificate to send.

this is really a deficiency in TLS, and it should really be fixed there...
rather than hoping that every application protocol will notice that
virtual hosting is a Good Thing and get another extension to handle it.

-dean