On 2014-02-20, Joel Sing <[email protected]> wrote:
> Name-based virtual hosting and SSL is a can of worms. In short, without SNI 
> (which AFAICT the base httpd does not support) the server does not know which 
> virtual server is required until after the SSL session has already been 
> established.

SNI is only needed in order to choose a suitable server certificate.
If you have a certificate valid for all hostnames you're expecting
(e.g. a wildcard certificate, or one using SAN) then Host: headers
are a reasonable way to switch virtual host.

Reply via email to