[wp-hackers] SSL Domain Mapping with WP Multisite

[Brian Layman]

Yes, SNI should provide an enhanced ability to do this. When I created 
the configuration described below, Apache 2.2.12 had just been released 
and was not widely available, so I did not dig into it very far. Plus, 
the largest percentage of my visitors had incompatible browsers. However 
the scarcity of IP address has made SNI a necessity and it's come a long 
way in the last 3 years.

So that wiki article indicates that IE under Windows XP still doesn't 
support SNI at all.  That needs to be taken into consideration. If your 
sites are to be used in a corporate environment which has a 
signification investment in a Windows XP architecture, SNI may not be an 
option.  Something to consider.

"As of 2011 most web browsers and SSL libraries have implemented support 
for SNI but there are still a large number of users still using 
combinations of browser and operating system that do not support it."
http://en.wikipedia.org/wiki/Server_Name_Indication#Support

So I guess it depends upon your target audience.  I wonder; how do you 
handle fail over if SNI doesn't work?  Can you even detect that?

Brian Layman


On 6/4/2012 11:01 AM, Doug Stewart wrote:
> Not true. SNI (which has some problems under older IE's) has made
> multiple SSL certs on one IP possible:
> http://en.wikipedia.org/wiki/Server_Name_Indication