HTTPS also needs distinct IP addresses for distinct hostnames, so that the HTTP ... | Hacker News

Hacker Newsnew | past | comments | ask | show | jobs | submit

limmeau on Oct 25, 2010 | parent | context | favorite | on: Firesheep: Easy HTTP session hijacking from within...

HTTPS also needs distinct IP addresses for distinct hostnames, so that the HTTP handshake, in which the Host: header appears, is already protected by an encrypted channel. No more having multiple websites on one IP address.

pornel on Oct 25, 2010 | [–]

There's TLS 1.1 SNI extension which adds vhosts.

Works — of course — everywhere except IE6/7XP.

loewenskind on Oct 25, 2010 | [–]

That's an incredibly drastic change and I seriously doubt it can even be done with IP4.

Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact