Don't have an account? Sign up
If you're already signed up, please sign in
SNI — a TLS extension through which a client indicates the requested hostname so a server can select the appropriate certificate.
During a TLS connection, the peers negotiate a protocol version and cipher suite, validate the certificate, derive session keys, and only then exchange protected data. Feature availability depends on the client, server, and selected TLS version.
SNI — a TLS extension through which a client indicates the requested hostname so a server can select the appropriate certificate.
The mechanism operates while establishing or reusing a TLS session and affects compatibility, connection latency, confidentiality, and resistance to later key compromise.
Disable obsolete versions and weak algorithms, use a valid certificate, verify SNI and ALPN behavior, update TLS libraries, and test with modern supported clients.
