SSL/TLS and SNI. When will it be safe to use?

Portal Home > Knowledgebase > Articles Database > SSL/TLS and SNI. When will it be safe to use?

Posted by evohost Canada, 06-04-2013, 05:55 PM
I'm curious if anyone has implemented SNI in any kind of production use yet. Now that cPanel has released an update that supports it (even though many other panel's support it already), I'm curious if anyone else thinks it is prime time to start using it? IPv4 addresses are starting to get sparse, we all know that. VPS providers are very rarely offering more than 1 IPv4 address per VPS, and most have tightened up the requirements to request more. The Dedicated server world looks like its going the same direction, as well. I currently hold about a dozen IPv4 addresses for sites that require SSL/TLS certificates. All of these IPv4 addresses are being utilized. Its a shame IPv6 roll out is taking so damn long... Where I live, no ISPs offer IPv6 for residential or commercial internet services yet.
Posted by zoid, 06-04-2013, 06:00 PM
Well, all current major browsers support it. So there I wouldnt see the problem. I'd rather see the problem with the stock Android 2 browser not supporting it yet as well as IE on pre-Vista.
Posted by evohost Canada, 06-04-2013, 06:09 PM
This is precisely what I mean. Are people still using IE and pre-Vista Windows OS? I personally use Gentoo Linux on all of my devices, and Android 2.3.5 on my phone (although currently looking at buying a Nexus 4). Is anyone here using SNI in production? Are there any tips/tricks on how to notify users their browser will not support a secure version of the site?
Posted by zoid, 06-04-2013, 06:11 PM
Well, unless you use a third-party browser you couldnt use SNI on your phone. As to IE on pre-Vista, this depends a lot on the country and audience. You can see a somewhat more or less accurate statistic at http://gs.statcounter.com/
Posted by evOwl, 06-05-2013, 08:59 AM
Mobile browsers are way to popular to not support them. Also depending on where you do business Windows XP could be the dominate OS.
Posted by zoid, 06-05-2013, 09:03 AM
Well, stock Android does not support it . And as far as XP is concerned it is only IE, other browsers not using the specific system component do support it.
Posted by evOwl, 06-05-2013, 09:07 AM
Sorry, I do not think I was very clear. I would not use SNI because of the lack of mobile browser support.
Posted by zoid, 06-05-2013, 09:15 AM
By them you meant the browsers? Sorry, my bad. Yes, with 40% Android 2 is still quite popular to simply go ahead and ignore its market share.