2008/2/13, Peter Sylvester wrote:

> > Once that a TLS with SNI connection is established, could it be
> > possible to know if the server is actually a virtual host or not ?
> >
> The SNI does not tell anything about virtual host, SNI allows to select
> an appropriate certficate.

Thanks for the answer. I should have read more carefully the rfc.

Now the concern I have is related with the real world interoperability
state with existing servers that might simply close the connection if
they don't understand or properly handle client TLS extensions. This
is a good reason to allow the user to enable or disable at will client
TLS extensions.

Any chart or info available somewhere ?

Does OpenSSL retry a connection with TLS extensions disabled if a
connection attempt with extensions enabled is remotely closed before
handshake is completed ?

-- 
-=[Yang]=-