Re: [SLUG] Name-based hosting limitation

From: Derek Glidden (dglidden@illusionary.com)
Date: Mon Aug 19 2002 - 12:26:41 EDT


On Sun, 2002-08-18 at 23:02, Paul M Foster wrote:
> Seems to me I recall reading something about some thing(s) you can't do
> with name-based hosting. By that, I mean hosting not based on a fixed IP
> address, but on just the name. Something like you couldn't do SSL or
> somesuch. Can't for the life of me recall what it was. Anyone know the
> answer or a link?

Do you mean "dynamic DNS" or "name-based virtual hosts"?

In the former case, anything is possible as long as DNS is accurate and
up-to-date.

In the latter case, you can only have one SSL cert per IP address by the
nature of the protocol, and other protocols (like ftp) that connect to a
the IP dereferenced by the hostname, but don't include the hostname as
part of the connection, are limited to a single host-per-IP. There are
other protocols with that limitation, but SSL and FTP are the "biggies".
Anything run out of inetd will have similar problems. (f.ex. you can't
have multiple "telnet" hosts on a single IP address.)

-- 
-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-
#!/usr/bin/perl -w
$_='while(read+STDIN,$_,2048){$a=29;$b=73;$c=142;$t=255;@t=map
{$_%16or$t^=$c^=($m=(11,10,116,100,11,122,20,100)[$_/16%8])&110;
$t^=(72,@z=(64,72,$a^=12*($_%16-2?0:$m&17)),$b^=$_%64?12:0,@z)
[$_%8]}(16..271);if((@a=unx"C*",$_)[20]&48){$h=5;$_=unxb24,join
"",@b=map{xB8,unxb8,chr($_^$a[--$h+84])}@ARGV;s/...$/1$&/;$d=
unxV,xb25,$_;$e=256|(ord$b[4])<<9|ord$b[3];$d=$d>>8^($f=$t&($d
>>12^$d>>4^$d^$d/8))<<17,$e=$e>>8^($t&($g=($q=$e>>14&7^$e)^$q*
8^$q<<6))<<9,$_=$t[$_]^(($h>>=8)+=$f+(~$g&$t))for@a[128..$#a]}
print+x"C*",@a}';s/x/pack+/g;eval 

usage: qrpff 153 2 8 105 225 < /mnt/dvd/VOB_FILENAME \ | extract_mpeg2 | mpeg2dec -

http://www.cs.cmu.edu/~dst/DeCSS/Gallery/ http://www.eff.org/ http://www.anti-dmca.org/



This archive was generated by hypermail 2.1.3 : Fri Aug 01 2014 - 16:29:50 EDT