From owner-freebsd-questions@FreeBSD.ORG  Tue Oct  5 07:32:14 2010
Return-Path: <owner-freebsd-questions@FreeBSD.ORG>
Delivered-To: freebsd-questions@freebsd.org
Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:4f8:fff6::34])
	by hub.freebsd.org (Postfix) with ESMTP id 97EB71065695
	for <freebsd-questions@freebsd.org>;
	Tue,  5 Oct 2010 07:32:14 +0000 (UTC)
	(envelope-from ryan.coleman@cwis.biz)
Received: from qmta02.emeryville.ca.mail.comcast.net
	(qmta02.emeryville.ca.mail.comcast.net [76.96.30.24])
	by mx1.freebsd.org (Postfix) with ESMTP id 7B41E8FC26
	for <freebsd-questions@freebsd.org>;
	Tue,  5 Oct 2010 07:32:14 +0000 (UTC)
Received: from omta06.emeryville.ca.mail.comcast.net ([76.96.30.51])
	by qmta02.emeryville.ca.mail.comcast.net with comcast
	id EvWm1f00216AWCUA2vYEc9; Tue, 05 Oct 2010 07:32:14 +0000
Received: from [10.0.1.9] ([70.89.202.1])
	by omta06.emeryville.ca.mail.comcast.net with comcast
	id EvYC1f00202K3z28SvYDjw; Tue, 05 Oct 2010 07:32:13 +0000
Mime-Version: 1.0 (Apple Message framework v1081)
Content-Type: text/plain; charset=us-ascii
From: Ryan Coleman <ryan.coleman@cwis.biz>
In-Reply-To: <AANLkTinvPvHHqVE4Vmcan5koTasTFPn2xUZxYEyVwAf1@mail.gmail.com>
Date: Tue, 5 Oct 2010 02:32:11 -0500
Content-Transfer-Encoding: 7bit
Message-Id: <CE36D1CE-D495-4FCA-87FF-0B6D3A8B62DA@cwis.biz>
References: <20101004221506.GA8662@polands.org>
	<AANLkTinCfhmyb1XVXOk4PiSs-MMRPJ4bjvkb6bYiiODJ@mail.gmail.com>
	<20101005035354.GB8662@polands.org> <4CAAAC4A.5060106@boosten.org>
	<4CAAB89F.70907@infracaninophile.co.uk>
	<2C683AF7-AFA5-4D5E-8575-19455EBB142B@cwis.biz>
	<AANLkTinvPvHHqVE4Vmcan5koTasTFPn2xUZxYEyVwAf1@mail.gmail.com>
To: Adam Vande More <amvandemore@gmail.com>
X-Mailer: Apple Mail (2.1081)
Cc: FreeBSD Mailing List <freebsd-questions@freebsd.org>,
	Peter Boosten <peter@boosten.org>
Subject: Re: OT: Apache as reverse SSL proxy
X-BeenThere: freebsd-questions@freebsd.org
X-Mailman-Version: 2.1.5
Precedence: list
List-Id: User questions <freebsd-questions.freebsd.org>
List-Unsubscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-questions>, 
	<mailto:freebsd-questions-request@freebsd.org?subject=unsubscribe>
List-Archive: <http://lists.freebsd.org/pipermail/freebsd-questions>
List-Post: <mailto:freebsd-questions@freebsd.org>
List-Help: <mailto:freebsd-questions-request@freebsd.org?subject=help>
List-Subscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-questions>, 
	<mailto:freebsd-questions-request@freebsd.org?subject=subscribe>
X-List-Received-Date: Tue, 05 Oct 2010 07:32:14 -0000


On Oct 5, 2010, at 2:05 AM, Adam Vande More wrote:

> On Tue, Oct 5, 2010 at 1:36 AM, Ryan Coleman <ryan.coleman@cwis.biz> wrote:
> 
>> 
>> On Oct 5, 2010, at 12:33 AM, Matthew Seaman wrote:
>> 
>>> Nowadays there is also the possibility of RFC2817 -- in essence you
>>> start an ordinary HTTP session, then issue a STARTTLS command and
>>> upgrade the connection to encrypted.  This will allow name-based virtual
>>> hosting with TLS to work as intended.  Unfortunately, last I checked,
>>> while apache supports this, most web browsers do not.
>> 
>> Throwing just my two bits in: Apache supports it, as does Firefox, and
>> nothing else (maybe Safari does...).
>> 
>> IE definitely does not. I looked into this before opting to go multiple
>> static IPs at home for my
>> webservers._______________________________________________
>> 
> 
> IE 7+ does however support RFC 3546(SNI), which is the defacto standard for
> accomplishing SSL name based vhosts.
> http://en.wikipedia.org/wiki/Server_Name_Indication

Only in Vista and later versions of Windows; Not XP.