Re: 2 domain names, 1 IP, one SSL cert
From: Ken Schaefer (kenREMOVE_at_THISadopenstatic.com)
Date: 12/20/04
- Previous message: Joe Kaplan \(MVP - ADSI\): "Re: Get UserGroup of Active Directory to control the security"
- In reply to: Andy: "RE: 2 domain names, 1 IP, one SSL cert"
- Next in thread: DKode: "Re: 2 domain names, 1 IP, one SSL cert"
- Reply: DKode: "Re: 2 domain names, 1 IP, one SSL cert"
- Messages sorted by: [ date ] [ thread ] [ subject ] [ author ] [ attachment ]
Date: Mon, 20 Dec 2004 10:45:23 +1100
Are you sure Hotmail does this? Can you point us to the page that actually
implements this on the hotmail.com site?
It maybe that Hotmail is using a wildcard certificate -or- it could be that
Hotmail.com has multiple certificates (one for each address) -or- it could
be that Hotmail uses a set of redirection logic and cookies to do what it
does.
Cheers
Ken
"Andy" <Andy@discussions.microsoft.com> wrote in message
news:09C69264-02EB-45DF-9B3F-B810629871D1@microsoft.com...
> Hrm interesting.
> Actually it appears as though the method that hotmail uses does exactly
> what
> I need..
> Any idea how hotmail does it?
>
> "Andy" wrote:
>
>> I have a web server with 2 domain names, one IP and a single SSL cert.
>>
>> Domain name one has the SSL cert, but domain name two doesn't.
>>
>> domain name one is the actual domain name of the server, domain name two
>> is
>> more of an alias to one site on the server. Therefore, a url on domain
>> name
>> one and another url on domain name two actually point to the same site.
>> so http://www.domainnameone.com/some/long/site points to the same place
>> as
>> http://www.domainnametwo.com
>>
>>
>> The site on domain name two requires secure transactions of passwords and
>> user names (via form authentication and LDAP). However, this is the only
>> secure transaction required. Everything else doesn't need to be secure.
>> Howeer, is it possible to some how piggyback on the SSL cert of the first
>> domain name, pass the transaction securely, yet not have the web browser
>> of
>> the users complain that the domain name doesn't match?
- Previous message: Joe Kaplan \(MVP - ADSI\): "Re: Get UserGroup of Active Directory to control the security"
- In reply to: Andy: "RE: 2 domain names, 1 IP, one SSL cert"
- Next in thread: DKode: "Re: 2 domain names, 1 IP, one SSL cert"
- Reply: DKode: "Re: 2 domain names, 1 IP, one SSL cert"
- Messages sorted by: [ date ] [ thread ] [ subject ] [ author ] [ attachment ]
Relevant Pages
|
|