For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Dispelling the New SSL Myth

Claiming SSL is not computationally expensive is like saying gas is not expensive when you don’t have to drive to work every day.  My car is eight years old this year. It has less than 30,000...
Published Jan 31, 2011
Version 1.0
acceleration
application delivery
architecture
availability
BIG-IP
certificates
data center feng shui
design
infrastructure
management
Pino_129850's avatar
Pino_129850
Icon for Nimbostratus rankNimbostratus
Jul 09, 2013
Wildcard certificates and subjectAltName are useful if all web sites on a particular IP address are operated by the same entity. But I thought it was a bad practice to share one certificate among multiple unrelated sites, such as hundreds of web sites operated by hundreds of customers of the shared web hosting provider that operates a given server. Go Daddy, for example, has been known to pack upwards of a thousand budget hosting customers onto one IP address and use name-based virtual hosting to distinguish them. And making a site IPv6-only won't work unless the vast majority of users can reach the IPv6 Internet. When will the majority of home users in North America and Western Europe have an IPv6 address?