121 reputation
2
bio website
location
age
visits member for 3 years, 9 months
seen Jan 31 '13 at 12:36

Jan
31
awarded  Teacher
Jan
31
comment Can an attacker reuse stolen SSL private key to recreate that domain on his server
You often need an IP address per domain not because any specific address is embedded in the certificate but because the SSL handshake takes place before the browser gets a chance to send the HTTP Host header. The server has to know which certificate to send and it's easiest if every domain uses a separate IP. You can also use different port per domain, but then your address will be https://example.com:12345/ instead https://example.com/ for every port other than 443. There is now Server Name Indication to solve that issue but it doesn't work on Windows XP which stops its adoption.
Jan
31
awarded  Supporter
Jan
31
answered Can an attacker reuse stolen SSL private key to recreate that domain on his server