[TriLUG] ssl through reverse proxy (Solved)

Steven Pinkham steve.pinkham at gmail.com
Mon Aug 27 13:16:15 EDT 2012


Jack Hill wrote:
> If you didn’t want to use the same cert, you could use Server Name
> Indication <http://en.wikipedia.org/wiki/Server_Name_Indication> (as
> long as you don’t need to support ancient versions of IE, which, um …
> no comment).

Unfortunately it's not just ancient IE. SNI doesn't work on *any* IE
version on XP, meaning it's unusable for public websites until at least
until April 2014, and likely for a while after that.
-- 
 | Steven Pinkham, Security Consultant    |
 | http://www.mavensecurity.com           |
 | GPG public key ID E9E996C1             |





More information about the TriLUG mailing list