On Wed, Oct 9, 2019 at 7:51 PM Eric Rescorla <[email protected]> wrote:

>
> How would that work? The SNI is used by the server to determine what
> certificate to send. That's why it's sent in CH.
>

I understand why SNI is needed for IPv4 addresses.

But, if I have Cloudflare (or any CDN) configured for a domain, and the
origin is only available via IPv6, the need for a disambiguating SNI in the
ClientHello from CDN to Origin is not clear.

thanks,
Rob
_______________________________________________
TLS mailing list
[email protected]
https://www.ietf.org/mailman/listinfo/tls

Reply via email to