Hey Maxim,

> This means that SNI can't be used with such backends (it never
> worked before as it can't work without TLS padding extension), and
> trivial solution is to don't switch it on.

I don't think that's valid solution, SNI should be used whenever possible.

Also, I think that "on/off" switch is much nicer workaround for the
problem than requiring users to play around with SSL protocols and/or
cipher suites.

Best regards,
Piotr Sikora

_______________________________________________
nginx-devel mailing list
[email protected]
http://mailman.nginx.org/mailman/listinfo/nginx-devel

Reply via email to