Frackin script kiddies!!

David Kramer david-8uUts6sDVDvs2Lz0fTdYFQ at public.gmane.org
Wed Aug 4 00:24:36 EDT 2010


Ward Vandewege wrote:
> On Tue, Aug 03, 2010 at 12:01:05AM -0400, David Kramer wrote:
>> HTTPS is a problematic solution, because SSL can't know anything about
>> domain names (ie virtual hosts don't work with SSL).  That means my one
>> IP address can only have one DocumentRoot, and I choose to use that for
>> webmail, thank you very much.
> 
> That's not true anymore, actually. Check out SNI:
> 
>   http://en.wikipedia.org/wiki/Server_Name_Indication

Interesting.  Thanks.

After I read this, though, it occurred to me that my webmail was running
under a subdirectory of my host name, and it would be trivial to set up
MythWeb as another subdirectory (eg https://www.thekramers.net/mail and
https://www.thekramers.net/myth).

So I did.  And disabled myth without ssl.





More information about the Discuss mailing list