Re: [Sks-devel] sks-keyservers.net New HKPS subpool added

[Kristian Fiskerstrand]

On 10/08/2012 11:07 PM, Kristian Fiskerstrand wrote:
> On 10/08/2012 11:05 PM, Stephan Seitz wrote:
>>
> 
> ..
> 
>> Hi guys,
> 
> Hi Stephan,
> 
> 

...

> 
>> I already use namebased vhosts (thank's for your explanation of TLS,
>> phil), so I could configure two proxies which are identical despite the
>> hostname and the certificates. That way, I would use two different
>> keys / crts without the need for subjectAltName.
>>
> 
> Again, yup
> 

Agreed too quickly there, you'll still need to generate a new CSR from
your private key that I can sign, where I'll add a subjectAltName, but
in that setup only the subjectAltName will ever be used, as the primary
host will be handled by your setup and different cert.

-- 
----------------------------
Kristian Fiskerstrand
http://www.sumptuouscapital.com
Twitter: @krifisk
----------------------------
"Great things are not accomplished by those who yield to trends and fads
and popular opinion."
(Jack Kerouac)
----------------------------
This email was digitally signed using the OpenPGP
standard. If you want to read more about this
The book: Sending Emails - The Safe Way: An
introduction to OpenPGP security is
available in both Amazon Kindle and Paperback
format at
http://www.amazon.com/dp/B006RSG1S4/
----------------------------
Public PGP key 0xE3EDFAE3 at http://www.sumptuouscapital.com/pgp/

signature.asc
Description: OpenPGP digital signature