On Fri, Sep 06, 2002 at 01:30:50PM +0100, Matthew Toseland wrote: > On Fri, Sep 06, 2002 at 02:17:38PM +0200, Oskar Sandberg wrote: < > > > I think desired behavior would be something like the way browsers treat > > SSL pages - warning whenever it is loads a page besides the current. This > > would require a plugin, but it can't be hard (I even think an old IE > > plugin did it some time the past). > What about SSL wrapping the connection, as suggested occasionally by > various people?
I don't think it works. AFAIK if you SSL wrap the connection it will warn before going to a site over normal HTTP, and when going to another https site if it presents a different certificate from the first. But by the time the browser finds out what certificate the other site is presenting, it has already revealed it's IP. Maybe I'm wrong, as I don't know exactly how the relationship between URLs and SSL certificates are bound - does it read the original certificate to see which domains it covers? -- Oskar Sandberg oskar at freenetproject.org _______________________________________________ devl mailing list devl at freenetproject.org http://hawk.freenetproject.org/cgi-bin/mailman/listinfo/devl
