News for hackers. Stuff that matters.
Re:Widespread Hijacking of Search Traffic in the United States by tlrobinson on Friday August 05, 2011 @04:55PM (#2851730)
Your understanding is incorrect. This is the reason SSL is incompatible with virtual hosts (see http://en.wikipedia.org/wiki/Server_Name_Indication)
Re:Widespread Hijacking of Search Traffic in the United States by rjbond3rd on Friday August 05, 2011 @08:38PM (#2852408)
It's not! Just use the latest Apache. It works great. I have 30 domains on a single IP, all under SSL.
Re:Widespread Hijacking of Search Traffic in the United States by tlrobinson on Saturday August 06, 2011 @07:19PM (#2855152)
Then it's using SNI, which I linked to. The request is still encrypted, but the host name is passed unencrypted using SNI.
Re:Widespread Hijacking of Search Traffic in the United States by mtogo on Friday August 05, 2011 @08:52PM (#2852452)
Which is great unless you have to deal with IE6 users :(.
Re:Widespread Hijacking of Search Traffic in the United States by rjbond3rd on Friday August 05, 2011 @10:22PM (#2852714)
Does MS even support IE6 anymore? Or are people using it without the benefit of security patches? Where I work, IE7 is considered obsolete.
Re:Widespread Hijacking of Search Traffic in the United States by abraham on Friday August 05, 2011 @10:45PM (#2852776)
IE6 has extended support until 2014 or market share is under 1%

http://en.wikipedia.org/wiki/Internet_Explorer_6