On Sat, Nov 12, 2016 at 3:32 AM, Alice Wonder <al...@librelamp.com> wrote:
> None of those clients should be used, and they do not work with SNI anyway > which is required for many of my sites (I tend to configure an empty > virtual host as first virtual host) > About SNI and an empty default virtual host, I think it's a good practice, and it helps avoid "virtual host confusion attacks" ( https://bh.ht.vc/vhost_confusion.pdf )
_______________________________________________ Ach mailing list Ach@lists.cert.at http://lists.cert.at/cgi-bin/mailman/listinfo/ach
