Correct, we need TLS / SSL v3 to implement the additional HELLO extension with the ability to say what domain name we want to talk to up-front. So Apache can share SSL across multiple webservers on one IP number.
BUT....
it needs to be implemented in both browser and server. Browsers are well advanced. Servers are not. Nobody in the Apache httpd team is working on it, even though patches have been provided. It is "not on the work list if the Microsoft webserver team" either, last I heard.
So if you know anyone who works in that area, please tell them this is the most important thing they can do this year, or any year stretching back to the invention of SSL. My humble opinion, only :)
no subject
Date: 2007-03-03 04:28 pm (UTC)BUT....
it needs to be implemented in both browser and server. Browsers are well advanced. Servers are not. Nobody in the Apache httpd team is working on it, even though patches have been provided. It is "not on the work list if the Microsoft webserver team" either, last I heard.
So if you know anyone who works in that area, please tell them this is the most important thing they can do this year, or any year stretching back to the invention of SSL. My humble opinion, only :)