On Thu, Apr 20, 2023 at 09:26:38AM +0100, Jeremy Harris via Exim-users wrote: > On 20/04/2023 06:18, Jasen Betts via Exim-users wrote: > > Their .com is a cname pointing to the .org, so the same host is both > > .com and .org, but their host isn't using SNI. > > This raises the question: should the name-check be against the CNAME-resolved > name rather than the initial? Both?
Initial. Cert should contain SANs for all supported names. -- Eugene Berdnikov -- ## List details at https://lists.exim.org/mailman/listinfo/exim-users ## Exim details at http://www.exim.org/ ## Please use the Wiki with this list - http://wiki.exim.org/
