On 16/04/18 06:28, Brandon Long via mailop wrote: > I always thought of SNI has the equivalent of the Host HTTP header, so it > should be the hostname you're connecting to. > > That's my reading of rfc 6066 at least, and what Gmail expects.
3. Server Name Indication [...] clients MAY include an extension of type "server_name" By my reading, that's not mandatory, so "/OU=No SNI provided; please fix your client./CN=invalid2.invalid" seems... rude. -- Cheers, Jeremy _______________________________________________ mailop mailing list mailop@mailop.org https://chilli.nosignal.org/cgi-bin/mailman/listinfo/mailop