Jesse Guardiani wrote:
[...]

any chance to get something with the https-login working? *smile*


I would if I could, but I think that's more of an issue with Apache than
sqwebmail. If you can think of a system that might work, then I'll consider
including it, but otherwise, you'll probably just have to get an IP address
and multiple certificates. I think that's kinda the way SSL is meant to be
implemented anyway. Name-based virtual hosting + SSL is a security risk, I
think.


Actually an issue with SSL, nothing much Apache can do unless they rewite SSL.


Make sense though - you want your headers to be encrypted (like POST and/or GET information) so you need to start the SSL session first, THEN you find out in the headers which vhost to use.

You technically CAN use otehr vhosts over an SSL connection, BUT it has to start the HTTPS session first to encrypt the headers, then it can check the Host: header to see where to direct it.

This has gotten a little off-topic though, so let's drop this side of the discussion ;)

/jesse




Reply via email to