Re: [TLS] Questions about TLS Server Name Indication extension

[Wan-Teh Chang <wtc at google.com>]

On Wed, Oct 28, 2009 at 4:26 PM, Nelson B Bolyard <nelson at bolyard.me> wrote:
>
> Consider this scenario:
> Physical host has two virtual hosts, A and B.
> First handshake:
>  client sends SNI with host name A, empty session ID.
>  server does full handshake, session ID 1.
> Second handshake (renegotiation):
>  client sends SNI with host name B and session ID 1,

I think "renegotiation" should be "resumption".

In this case, the client should not request a resumption
handshake with session ID 1, because the server won't
send a certificate in a resumption handshake, so the
client cannot verify the server has a certificate for host
name B.

The only exception is that the certificate for host name A
has a subject alternative name for host name B.

Wan-Teh