undefined | Better HN

0 pointsLinuxBender11y ago0 comments

SNI is fine for web browsing, but for end-points that need to be reachable by older versions of python, tomcat, ruby and many proprietary apps, this will not suffice. This becomes a problem on business to business communications, automation, API's, etc. For the general purpose websites, blogs, etc, SNI would be fine.

0 comments

2 comments · 1 top-level

hobarrera11y ago· 1 in thread

You're probably talking about really old versions of applications. I've been using SNI for half a decade without any issues.

Anything so old that does not support SNI probably still uses SSLv3, or maybe even SSLv2, so you really should be upgrading that ASAP, rather than keep supporting it.

LinuxBenderOP10y ago

If you take a look at the wiki article, there are some versions listed. Those are still in use. If our company forced people to use SNI, we would be out of business. There are TLS 1.0+ enabled apps that can't do SNI. Perhaps you and I are just in very different business models.

j / k navigate · click thread line to collapse