On 16/04/18 06:28, Brandon Long via mailop wrote:
> I always thought of SNI has the equivalent of the Host HTTP header, so it
> should be the hostname you're connecting to.
> 
> That's my reading of rfc 6066 at least, and what Gmail expects.

3.  Server Name Indication
[...]
clients MAY include an
   extension of type "server_name"


By my reading, that's not mandatory, so

"/OU=No SNI provided; please fix your client./CN=invalid2.invalid"

seems... rude.
-- 
Cheers,
  Jeremy

_______________________________________________
mailop mailing list
mailop@mailop.org
https://chilli.nosignal.org/cgi-bin/mailman/listinfo/mailop

Reply via email to