Assume there are two servers;
server1.com has a standard SSL certificate installed and
server2.com has a wildcard SSL certificate (*.server2.com) installed.
Next, assume you make from server 1 via SSL connection an API call to
If someone eavesdrops on the connection, which URL of server2 would the sniffer see?
Would the sniffer see
server2.com or the subdomain that was called