| 01:18.29 | *** join/#utah fadein (~Erik@c-67-171-115-158.hsd1.ut.comcast.net) |
| 01:55.31 | mheath | Sargun_Screen: I don't think that's a wise investment choice. |
| 02:29.09 | *** join/#utah mabes (~mabes@runner.fttp.xmission.com) |
| 02:42.25 | *** join/#utah mheath_ (ae17ddc7@gateway/web/freenode/ip.174.23.221.199) |
| 02:46.32 | *** join/#utah emcnabb (~emcnabb@adsl-074-184-214-151.sip.asm.bellsouth.net) |
| 02:46.32 | *** mode/#utah [+v emcnabb] by ChanServ |
| 02:57.41 | *** join/#utah emcnabb (~emcnabb@adsl-074-184-214-151.sip.asm.bellsouth.net) |
| 02:57.41 | *** mode/#utah [+v emcnabb] by ChanServ |
| 04:15.45 | *** join/#utah neybar (~jalance@199.30.185.211) |
| 06:19.18 | *** join/#utah har-od (~dshipp@c-71-195-218-161.hsd1.ut.comcast.net) |
| 06:39.39 | *** join/#utah mecworks (~marc@wap.mecworks.com) |
| 07:46.21 | Sargun_Screen | mheath_: 70% of default, but 25% yield. |
| 12:14.20 | *** join/#utah TimRiker (~TimRiker@bzflag/projectlead/TimRiker) |
| 12:14.20 | *** mode/#utah [+o TimRiker] by ChanServ |
| 12:15.10 | *** join/#utah TimRiker (~TimRiker@bzflag/projectlead/TimRiker) |
| 12:15.10 | *** mode/#utah [+o TimRiker] by ChanServ |
| 12:46.47 | *** join/#utah ^Phantom2^ (~Phantom@c-98-202-93-217.hsd1.ut.comcast.net) |
| 12:46.47 | *** join/#utah ^Phantom2^ (~Phantom@unaffiliated/phantom/x-896124) |
| 13:28.17 | *** join/#utah TimRiker (~TimRiker@bzflag/projectlead/TimRiker) |
| 13:28.17 | *** mode/#utah [+o TimRiker] by ChanServ |
| 14:11.55 | *** join/#utah fadein (~Erik@c-67-171-115-158.hsd1.ut.comcast.net) |
| 14:14.02 | *** join/#utah sjansen (~sjansen@ip65-44-231-178.z231-44-65.customer.algx.net) |
| 14:19.39 | *** join/#utah olli1 (~ories@137.65.228.20) |
| 14:20.38 | *** join/#utah amjith (46677b08@gateway/web/freenode/ip.70.103.123.8) |
| 14:20.56 | *** join/#utah NoCoolName_Tom (~NoCoolNam@c-71-195-220-247.hsd1.ut.comcast.net) |
| 14:22.39 | *** join/#utah jalbretsen (~jalbretse@70.102.57.206) |
| 14:25.19 | *** join/#utah nage (~george@97.75.169.100) |
| 14:27.30 | *** join/#utah macnewbold (~Adium@66.60.115.30) |
| 14:32.25 | *** join/#utah carmony (~justin@c-24-10-180-216.hsd1.ut.comcast.net) |
| 14:34.44 | *** join/#utah har-od (~dshipp@fw.oremut02.us.wh.verio.net) |
| 14:36.12 | *** join/#utah neybar (~jalance@74-220-196-115.bluehost.com) |
| 14:38.49 | *** part/#utah mindjuju1 (~mindjuju@173-10-26-193-BusName-utah.ut.hfc.comcastbusiness.net) |
| 14:41.04 | *** join/#utah mindjuju (~mindjuju@173-10-26-193-BusName-utah.ut.hfc.comcastbusiness.net) |
| 15:01.20 | *** join/#utah fungus (~olsonl@bromine.sosstaffing.com) |
| 15:01.47 | eightyeight | openssl requires a different ip address for every secure domain, yes? |
| 15:02.15 | eightyeight | i can't have https://foo.com and https://bar.com point to the same ip address, iirc |
| 15:06.53 | fugue88 | I don't know why OpenSSL would have that restriction. Web servers would if they don't support STARTTLS, or if the web browsers you're catering to don't support it. |
| 15:07.20 | fugue88 | eightyeight: ^ |
| 15:09.27 | macnewbold | eightyeight: in general it works out that way in practice - problem is that the SSL connection has to be established before the web server receives the Host header, so you wouldn't know whether they were asking for foo.com or bar.com, and therefore wouldn't know which ssl cert to give them |
| 15:11.38 | fugue88 | Oh, cool. TLS has a "server name indication" that would remedy that, without having to do the initial GET+Host: followed by STARTTLS. |
| 15:11.42 | fugue88 | https://secure.wikimedia.org/wikipedia/en/wiki/Transport_Layer_Security#Support_for_name-based_virtual_servers |
| 15:12.34 | sjansen | Before using SNI wit TLS, make sure that its supported by all the browsers you care about. |
| 15:13.05 | fugue88 | https://secure.wikimedia.org/wikipedia/en/wiki/Server_Name_Indication#Support |
| 15:13.10 | fugue88 | Sadness on that page. |
| 15:13.14 | sjansen | Until recently, IE basically meant SNI couldn't be used. Now that people are drop kicking old version of IE, you might be able to get away with it. |
| 15:14.14 | eightyeight | i've been wanting to convert all of my sites to https by option, but for some reason was under the impression that i could only do one site per ip |
| 15:14.19 | eightyeight | if not, then that's good news |
| 15:14.41 | macnewbold | it would seem that SNI might be a "bad idea" since it exposes the host name you're trying to talk to prior to having an SSL authenticated and encrypted channel |
| 15:14.55 | macnewbold | but maybe it's encrypted and just not authenticated... |
| 15:15.34 | macnewbold | conventional wisdom is usually that SSL and name-based virtual hosts on one IP address don't mix. |
| 15:15.50 | *** join/#utah mabes (~mabes@66.236.74.194.ptr.us.xo.net) |
| 15:15.55 | eightyeight | which is what i would be doing |
| 15:17.23 | fugue88 | eightyeight: So, here's the STARTTLS alternative to SNI: http://www.ietf.org/rfc/rfc2817.txt. I don't know how well-supported it is. |
| 15:17.55 | eightyeight | cool. thx |
| 15:22.17 | *** join/#utah bmidgley_ (~bmidgley@66.236.74.194.ptr.us.xo.net) |
| 15:38.35 | *** join/#utah tiwula (~lane@70.89.246.241-Busname-UT.hfc.comcastbusiness.net) |
| 15:45.51 | *** join/#utah jnbek|wc (~jnbek|wc@pdpc/supporter/active/jnbek) |
| 15:57.12 | *** join/#utah bmidgley_ (~bmidgley@66.236.74.194.ptr.us.xo.net) |
| 16:01.39 | *** join/#utah craigj (~craigj@neutroninteractive-xmission.xmission.com) |
| 16:01.56 | *** join/#utah Jason_Wood (~Tadaka@c-76-27-54-140.hsd1.ut.comcast.net) |
| 16:33.52 | *** join/#utah TimRiker (~TimRiker@bzflag/projectlead/TimRiker) |
| 16:33.52 | *** mode/#utah [+o TimRiker] by ChanServ |
| 16:42.53 | Sargun_Screen | eightyeight: Are you running out of IPs? |
| 16:48.42 | eightyeight | Sargun_Screen: heh. with comcast, they only give you 1 ip, unless you want to pay for more, which i'm not interested in |
| 16:48.51 | eightyeight | s/ip/ipv4 ip/ |
| 16:54.56 | *** join/#utah TimRiker (~TimRiker@bzflag/projectlead/TimRiker) |
| 16:54.56 | *** mode/#utah [+o TimRiker] by ChanServ |
| 16:58.06 | *** join/#utah carmony_ (~justin@c-24-10-180-216.hsd1.ut.comcast.net) |
| 17:19.46 | Sargun_Screen | eightyeight: $22/mo for amazon small instance after $227.50/yr reservation fee |
| 17:20.09 | Sargun_Screen | plus $.25/GB |
| 17:22.43 | JoshH | maybe it's not worth spending money to host a couple dinky personaly sites that his comcast connection can handle. if he doesn't want to pay comcast 4 bucks for another ip i doubt he wants to pay amazon 22. |
| 17:26.26 | sontek | I've done SSL on a single ip for multiple sites in IIS.. so it is possible |
| 17:27.40 | eightyeight | Sargun_Screen: further, i have ipv6, so i'm really not hurting for ips anyway. ã |
| 17:31.16 | *** join/#utah SoftwareMaven (~user@67-2-76-129.slkc.qwest.net) |
| 17:35.02 | *** join/#utah carmony_ (~justin@c-24-10-180-216.hsd1.ut.comcast.net) |
| 18:02.21 | *** join/#utah mindjuju (~mindjuju@173-10-26-193-BusName-utah.ut.hfc.comcastbusiness.net) |
| 18:18.50 | *** join/#utah SoftwareMaven (~user@67-2-76-129.slkc.qwest.net) |
| 18:24.11 | *** join/#utah bmidgley_ (~bmidgley@72.11.74.102) |
| 18:59.41 | *** join/#utah TimRiker (~TimRiker@bzflag/projectlead/TimRiker) |
| 18:59.41 | *** mode/#utah [+o TimRiker] by ChanServ |
| 19:25.35 | *** join/#utah wps (~wps@76.8.223.101) |
| 19:31.26 | *** join/#utah bmidgley_ (~bmidgley@66.236.74.194.ptr.us.xo.net) |
| 21:30.06 | *** join/#utah ibot (~ibot@rikers.org) |
| 21:30.06 | *** topic/#utah is logs @ http://ibot.rikers.org/%23utah/ | minecraft multiplayer: plug.org | #utah welcomes its new IPv6 overlords |
| 21:30.06 | *** mode/#utah [+o ibot] by ChanServ |
| 21:33.08 | *** join/#utah cmcguire (~cmcguire@69.27.0.89) |
| 22:05.05 | Tene | eightyeight: openssl only requires a different IP for every secure domain if you have to support like IE 5 or something |
| 22:06.31 | Tene | Sargun_Screen: AWS micro isntance is free at low usage levels. |
| 22:10.10 | sjansen | My screen has never looked better --> http://bacolicio.us//http://www.gurulabs.com/ |
| 22:11.41 | JoshH | awesome, sjansen |
| 22:14.31 | *** join/#utah redbeard2 (~jphall@techhat.dsl.xmission.com) |
| 23:33.26 | *** join/#utah supaplex (~supaplex@69.80.69.15) |