Skip to content

Commit ccb305a

Browse files
committed
Updated info about browser SNI support.
1 parent 65d62fd commit ccb305a

File tree

1 file changed

+4
-4
lines changed

1 file changed

+4
-4
lines changed

content/nginx/admin-guide/security-controls/terminating-ssl-http.md

Lines changed: 4 additions & 4 deletions
Original file line numberDiff line numberDiff line change
@@ -271,13 +271,13 @@ server {
271271

272272
### Server Name Indication
273273

274-
A more generic solution for running several HTTPS servers on a single IP address is the [TLS Server Name Indication](https://en.wikipedia.org/wiki/Server_Name_Indication) (SNI) extension ([RFC 6066](https://tools.ietf.org/html/rfc6066)), which allows a browser to pass a requested server name during the SSL handshake. With this solution, the server will know which certificate it should use for the connection. However, SNI has limited browser support. Currently it is supported starting with the following browser versions:
274+
A more generic solution for running several HTTPS servers on a single IP address is the [TLS Server Name Indication](https://en.wikipedia.org/wiki/Server_Name_Indication) (SNI) extension ([RFC 6066](https://tools.ietf.org/html/rfc6066)), which allows a browser to pass a requested server name during the SSL handshake. With this solution, the server will know which certificate it should use for the connection. Although SNI is widely supported by modern browsers, some old browsers may still not include support for it. Major browsers support SNI starting with the following versions:
275275

276-
- Opera 8.0
277-
- MSIE 7.0 (but only on Windows Vista or higher)
276+
- Chrome 105 (Windows version supports SNI on Vista or higher, too)
278277
- Firefox 2.0 and other browsers using Mozilla Platform rv:1.8.1
278+
- MSIE 7.0 (but only on Windows Vista or higher)
279+
- Opera 8.0
279280
- Safari 3.2.1 (Windows version supports SNI on Vista or higher)
280-
- Chrome (Windows version supports SNI on Vista or higher, too)
281281

282282
Only domain names can be passed in SNI. However, some browsers will pass the IP address of the server as its name if a request includes a literal IP address. It is best not to rely on this.
283283

0 commit comments

Comments
 (0)