What is Server Name Indication (SNI)?

Category: All about SSL certificates

Apache Nginx SNI

What is SNI?

Server Name Indication is a recent extension of the TLS and SSL protocol that allows a browser to indicate at the beginning of the SSL connection which hostname the browser is connecting to. The main advantage of SNI is that it allows multiple SSL certificates to be associated with the same IP address of a web server, rather than having to provide a separate IP address for each SSL website.

How does SNI work?

The HTTP protocol has supported the concept of name-based virtual hosting since version 1.1. At the beginning of the connection to the web server, the browser specifies the hostname it wants to connect to, and this hostname is read from the host headers provided in the browser request. With an SSL connection, this is not possible by default, because the handshake of the SSL connection takes place before the browser request is decrypted and the web server can figure out which hostname is being requested.
Websites hosted on the same IP address must necessarily use the same SSL certificate, or have their own IP address, which is not appropriate with the current scarcity of IPv4 addresses.

So SNI solves this problem. SNI is an extension of the TLS protocol where the hostname is sent as "part" of the SSL/TLS handshake.
This allows the Web server to select the correct Web site and present the correct certificate to the browser.


Related articles

Generate a multi-domain (SAN) SSL certificate request using OpenSSL

If you want to use an SSL certificate with multiple domain names, you can order an SSL certificate via our...

Read more

What are the main guarantees of SSL certificates?

SSL certificates are no longer an optional extra but have become an essential part of securing websites in the modern...

Read more

Discover here how we’ve fixed a blocking error when upgrading ESXi 6.5 to 7.0 update 2 through vSphere Lifecycle Manager.

Kinamo maintains multiple VMware vSphere clusters, not only for our own infrastructure, but also for a variety of customers. As...

Read more

Need extra help?

Were not all your questions answered?
Don't worry, we will be happy to help you via a support request!

Kinamo

Select your language