network profile
| bio | website | |
|---|---|---|
| location | ||
| age | ||
| visits | member for | 2 years, 3 months |
| seen | Jan 31 at 12:36 | |
| stats | profile views | 0 |
|
Jan 31 |
awarded | Teacher |
|
Jan 31 |
comment |
Can an attacker reuse stolen SSL private key to recreate that domain on his server You often need an IP address per domain not because any specific address is embedded in the certificate but because the SSL handshake takes place before the browser gets a chance to send the HTTP Host header. The server has to know which certificate to send and it's easiest if every domain uses a separate IP. You can also use different port per domain, but then your address will be https://example.com:12345/ instead https://example.com/ for every port other than 443. There is now Server Name Indication to solve that issue but it doesn't work on Windows XP which stops its adoption. |
|
Jan 31 |
awarded | Supporter |
|
Jan 31 |
answered | Can an attacker reuse stolen SSL private key to recreate that domain on his server |
