undefined | Better HN

Skip to content

Top Best Ask Show New Jobs

0 pointsx5n111y ago0 comments

> costing a fortune.

The problem is not the SSL certificate, the problem is the IP address. That will no longer be a problem as soon as IPv6 takes hold in a few years, I give it about 3. They currently have to deploy the SSL certificate to over 30 different IPs hence it costing the immense amount. The certificate can be had for $10.

0 comments

7 comments · 1 top-level

toomuchtodo11y ago· 6 in thread

Why would anyone use non-SNI SSL/TLS anymore? Are there really that many Windows XP clients out there?

eropple11y ago

One of my clients still sees a surprising amount of Android 2.x traffic. Other than that, yeah, I can't see a reason.

mike-cardwell11y ago

Exactly. I default to SNI being acceptable now, unless somebody has convincing evidence that for their particular use case they can't use it.

eli11y ago

I dunno where the line it, but Windows XP is in the ballpark of 2% of our traffic, depending on the site and how you measure it. The bummer is that HTTPS breaks kinda badly if you use an SNI cert and the OS/browser doesn't support it.

Dylan1680711y ago

2% is IE on XP, or XP in general?

I wish people would be more clear when they bring up XP. The OS is not the problem.

stenius11y ago

python 2.7 doesn't support SNI which is used by a lot of consumers of APIs

hnmsc1211y ago

Python 2.7.9 supports SNI: https://www.python.org/downloads/release/python-279/

j / k navigate · click thread line to collapse