Peter Mott wrote:
[...] In the land of e-commerce, web based applications need to use SSL. That stuff needs a unique IP address associated with the certificate common name.
All depends on how you terminate your SSL traffic... one of the major SSL acceleration appliance vendor's primary features is that it will terminate SSL at layer 2 without even having an IP address. Yes, it's the same vendor that had a security alert which only applied *if* you were silly enough to assign and IP address to any of the interfaces. The entire discussion brings back recent memories of "the internet can't scale" arguments in certain forms, supposed APNIC allocation policy restrictions for web hosting facilities and that silly sold.com.au auction for an entire class C (supposedly portable, but has yet come on line over a year later) that only fetched an AU$800 winning bid (which would have been a one-time fee a little over $AU3 per IP if the winning bidder was/is ever able to dislodge it from Telstra's routing tables... LOL). ...needless to say, old/new ideas/opinions about how things should be done abound and occasional silliness has been known to exist in-between (and at) the extremes... I seem to recall reading something about consensus and running code in a RFC somewhere. - To unsubscribe from nznog, send email to majordomo(a)list.waikato.ac.nz where the body of your message reads: unsubscribe nznog