easyhosting Posted May 8, 2013 Share Posted May 8, 2013 also a good majority of servers will still be using CentOS 5 which SNI does not support 0 Quote Link to comment Share on other sites More sharing options...
epretorious Posted May 14, 2013 Share Posted May 14, 2013 well ive been a webhost since 1999 and ive not come across many hosts that use SSL though SNI due to securtiy issues More FUD. Please provide some credible references instead of just crapping all over the Internet. ...certainly the information given is not FUD, and still represents current best practice. And the reason for that... SNI is not universally supported on all platforms/browser combinations, most notably WinXP/IE (and some other browsers IIRC). Compounding the problem, WinXP still has >20% of the desktop browser market (http://gs.statcounter.com/#os-ww-monthly-201204-201304) leaving a potentially large pool of people that won't be able to use a SNI-enabled site. Thus, for many sites that must use SSL (eg eCommerce) SNI is still not (and may not be for a long time) a viable option. I understand your position that SNI is not a viable solution because >20% of the browser market does not support it, Brian. But I believe that easyhosting is doing the community a disservice by claiming that SNI is insecure without providing some credible references. BTW: Thanks for the reference to statcounter.com. 0 Quote Link to comment Share on other sites More sharing options...
brianr Posted May 15, 2013 Share Posted May 15, 2013 WRT my "information given is not FUD" comment: I was making a generalization regarding the general purview that SNI is not a viable option, and was not commenting specifically on any security implications to SNI. To that point, I stand behind my assertion that the general distaste for SNI is not FUD in and of itself. As far as security goes, as I have no intention to use SNI (for the reasons stated above -- my servers have too high a percentage of commerce sites to justify the few IPs that might be saved vs. the WinXP headaches), I'm not verse on any security implications it may have. 0 Quote Link to comment Share on other sites More sharing options...
panacheweb Posted May 16, 2013 Share Posted May 16, 2013 More FUD Thank god you explain that, I thought it meant f'in useless dips.. 0 Quote Link to comment Share on other sites More sharing options...
aroiz Posted June 1, 2013 Share Posted June 1, 2013 You can find excelent and cheap providers at google, I have one, but is a top secret. 0 Quote Link to comment Share on other sites More sharing options...
Recommended Posts
Join the conversation
You can post now and register later. If you have an account, sign in now to post with your account.