From owner-freebsd-questions@FreeBSD.ORG  Tue Oct  5 06:36:11 2010
Return-Path: <owner-freebsd-questions@FreeBSD.ORG>
Delivered-To: freebsd-questions@freebsd.org
Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:4f8:fff6::34])
	by hub.freebsd.org (Postfix) with ESMTP id 0915C1065673
	for <freebsd-questions@freebsd.org>;
	Tue,  5 Oct 2010 06:36:11 +0000 (UTC)
	(envelope-from ryan.coleman@cwis.biz)
Received: from qmta09.emeryville.ca.mail.comcast.net
	(qmta09.emeryville.ca.mail.comcast.net [76.96.30.96])
	by mx1.freebsd.org (Postfix) with ESMTP id E2AAD8FC15
	for <freebsd-questions@freebsd.org>;
	Tue,  5 Oct 2010 06:36:10 +0000 (UTC)
Received: from omta19.emeryville.ca.mail.comcast.net ([76.96.30.76])
	by qmta09.emeryville.ca.mail.comcast.net with comcast
	id Eubo1f0011eYJf8A9ucAGl; Tue, 05 Oct 2010 06:36:10 +0000
Received: from [10.0.1.9] ([70.89.202.1])
	by omta19.emeryville.ca.mail.comcast.net with comcast
	id Euc71f00702K3z201uc8Um; Tue, 05 Oct 2010 06:36:09 +0000
Mime-Version: 1.0 (Apple Message framework v1081)
Content-Type: text/plain; charset=us-ascii
From: Ryan Coleman <ryan.coleman@cwis.biz>
In-Reply-To: <4CAAB89F.70907@infracaninophile.co.uk>
Date: Tue, 5 Oct 2010 01:36:07 -0500
Content-Transfer-Encoding: quoted-printable
Message-Id: <2C683AF7-AFA5-4D5E-8575-19455EBB142B@cwis.biz>
References: <20101004221506.GA8662@polands.org>	<AANLkTinCfhmyb1XVXOk4PiSs-MMRPJ4bjvkb6bYiiODJ@mail.gmail.com>	<20101005035354.GB8662@polands.org>
	<4CAAAC4A.5060106@boosten.org>
	<4CAAB89F.70907@infracaninophile.co.uk>
To: Matthew Seaman <m.seaman@infracaninophile.co.uk>
X-Mailer: Apple Mail (2.1081)
Cc: FreeBSD Mailing List <freebsd-questions@freebsd.org>,
	Peter Boosten <peter@boosten.org>
Subject: Re: OT: Apache as reverse SSL proxy
X-BeenThere: freebsd-questions@freebsd.org
X-Mailman-Version: 2.1.5
Precedence: list
List-Id: User questions <freebsd-questions.freebsd.org>
List-Unsubscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-questions>, 
	<mailto:freebsd-questions-request@freebsd.org?subject=unsubscribe>
List-Archive: <http://lists.freebsd.org/pipermail/freebsd-questions>
List-Post: <mailto:freebsd-questions@freebsd.org>
List-Help: <mailto:freebsd-questions-request@freebsd.org?subject=help>
List-Subscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-questions>, 
	<mailto:freebsd-questions-request@freebsd.org?subject=subscribe>
X-List-Received-Date: Tue, 05 Oct 2010 06:36:11 -0000


On Oct 5, 2010, at 12:33 AM, Matthew Seaman wrote:

> Nowadays there is also the possibility of RFC2817 -- in essence you
> start an ordinary HTTP session, then issue a STARTTLS command and
> upgrade the connection to encrypted.  This will allow name-based =
virtual
> hosting with TLS to work as intended.  Unfortunately, last I checked,
> while apache supports this, most web browsers do not.

Throwing just my two bits in: Apache supports it, as does Firefox, and =
nothing else (maybe Safari does...).

IE definitely does not. I looked into this before opting to go multiple =
static IPs at home for my webservers.=