RE: [cobalt-users] Security Help

[flash22@xxxxxxx]

On Fri, 23 Feb 2001, Nick Ciantro wrote:

> Can each virtual site have its own SSL certificate if purchase through
> Verisign.  Or must I use a new Ip for another site?

You can only have one SSL cert per IP address, this is due to a rather
annoying design flaw in the https protocol. When a browser acecsses a
virtual hosted site, it has to send the domain name to the server so the
server knows which virtual site the browser wants to access, but the
request is encrypted, to read it the server has to decrypt it, but to
decrypt it it needs to know which domain is being requested so it knows
which certicicate to use to do the decryption...it's a catch 22....

gsh