Lead Report / History

The Name TLS Had to Hear Before It Could Hide It: How SNI Made Shared HTTPS Possible
At a shared address, a TLS server had to choose a certificate before it could decrypt the HTTP request that named the intended site. Server Name Indication resolved that ordering problem by putting the name in the ClientHello—making virtual HTTPS practical while leaving the routing name visible before encryption began.











