[TriLUG] ssl through reverse proxy (Solved)

Jack Hill jackhill at jackhill.us
Mon Aug 27 13:33:17 EDT 2012


On Mon, 27 Aug 2012 13:16:15 -0400
Steven Pinkham <steve.pinkham at gmail.com> wrote:

> Jack Hill wrote:
> > If you didn’t want to use the same cert, you could use Server Name
> > Indication <http://en.wikipedia.org/wiki/Server_Name_Indication> (as
> > long as you don’t need to support ancient versions of IE, which, um
> > … no comment).
> 
> Unfortunately it's not just ancient IE. SNI doesn't work on *any* IE
> version on XP, meaning it's unusable for public websites until at
> least until April 2014, and likely for a while after that.


At which time everyone will be on IPv6, so it won’t be needed anymore ☺
XP is kind of ancient anyway; it is older than RHEL4 after all
(although it looks like RHEL4 support is is available in some form
until 2015).

Jack



More information about the TriLUG mailing list