> > Thanks for the update Cayden... it's nice to know this issue is still > alive and high priority! >
> For me the biggest issue with SNI is pre-ICS Android and Blackberry more > than IE (or Safari) with Windows-XP. I can appreciate the desire and > temptation for an SNI solution but the reality is that there are still too > many non-compliant clients out there for SNI to be an adequate solution for > 99% of sites. I wish SNI had been part of the original TLS spec but > unfortunately that isn't the case and we still have several years before > enough non-compliant clients are flushed from the ecosystem to make SNI a > viable solution. Practically every Android phone (non Ice Cream Sandwich) > and many Android tablets including the Kindle Fire issue certificate > warnings with SNI today. So if you care about Android / Kindle Fire / > Blackberry / IE-XP clients then SNI isn't for you. The fact is if you use > SNI today your site will have an unprofessional blemish with the numerous > non-compliant clients and will result in a sub-standard user experience and > possibly support calls. > > So my hope is that Google keeps the SNI effort alive for future use but > makes VIP the recommended, affordable, and perhaps only solution for > today's GAE apps. Since any non-trivial site should be using SSL today to > protect session data etc., I hope Google does the right thing to support > proper secure computing on its flagship platform. I can only imagine the > cost and challenges involved with getting the VIP solution to work in the > cloud environment but every once in a while a feature comes along that you > just need to support because its the right thing to do and not to recoup > associate costs and make a big profit. I would argue that (VIP) SSL is one > of those features. It's something the GAE team can do simply because > they're Google and a leading steward of the Internet. The alternate is to > pollute the web with certificate warnings, the majority of which will > likely be on its own Android platform. > > While we await this vital missing piece of an otherwise awesome GAE > platform you can test your client browsers responses to SNI here: > https://sni.velox.ch/ > -- You received this message because you are subscribed to the Google Groups "Google App Engine" group. To view this discussion on the web visit https://groups.google.com/d/msg/google-appengine/-/7m0-QAOuQdUJ. To post to this group, send email to google-appengine@googlegroups.com. To unsubscribe from this group, send email to google-appengine+unsubscr...@googlegroups.com. For more options, visit this group at http://groups.google.com/group/google-appengine?hl=en.
