id	summary	reporter	owner	description	type	status	priority	milestone	component	resolution	keywords	cc
55	certificates on *.scripts.mit.edu as a separate IP address	price	quentin	"(Split out from #48.)

Currently lockername.scripts.mit.edu gives a certificate error on IE 6 and Safari.  The problem is that (modulo the recent SNI extension) the HTTPS protocol doesn’t support sending the virtual host name before the server must decide which certificate to present.  In #48, Joe installed SNI, which FF 2 and IE 7 understand.

To accomplish the highly desirable #17, we need to support these other browsers; many scripts users will not consider it acceptable that their viewers on IE 6 and Safari get certificate errors.  To do this, we can move scripts.mit.edu to a separate IP from *.scripts.mit.edu, so that the server knows which certificate to present based on the IP.

"	defect	closed	major		web	fixed