TLS Server Name Indication/TLS v1.2
I was wondering the TLS SNI Extension could be added to LSWS for support of SSL name-based virtual hosts. It's a pretty recent thing, but for my sites I end up using a certificate with a subjectAltName. I currently self-sign instead of paying for this as my subjectAltName's change so I end up reissuing every few months. Supporting TLS SNI would help workaround this, most major browsers support TLS SNI.
This would require supporting TLS v1.2 I believe. That wouldn't be a bad thing, TLS v1.0 was barely an upgrade to SSLv3 and TLSv1.1 has been out since 2006, 1.2 out since 2008.
Nothing high priority, but SSL name-based virtual hosting would certainly be a leg up for LSWS.
|
Threaded Mode