IWETHEY v. 0.3.0 | TODO
1,095 registered users | 0 active users | 0 LpH | Statistics
Login | Create New User
IWETHEY Banner

Welcome to IWETHEY!

New Not much
From http://support.microsoft.com/kb/938703
Determine whether multiple SSL certificates meet the requirements that are described in step 1. Schannel (the Microsoft SSL provider) selects the first valid certificate that Schannel finds in the Local Computer store. If multiple valid certificates are available in the Local Computer store, Schannel may not select the correct certificate. A conflict with a certification authority (CA) certificate may occur if the CA is installed on a domain controller that you are trying to access through LDAPS.

I've seen IIS consistently blow an intermediate cert chain if the client is Firefox or Safari, and yet do it right with IE. Some subtlety in the handshake definitely plays a role in its decision to pick one cert over another. (Haven't seen this for a good 8 months now, so they may have fixed particular possibility.)

As to why you *want* to do something like that: if the server is available in different domains, say box.local and box.com (but I assume that the 168.192.1.250 was a transposition error.)
New no transposition error, different network
but only one domain (lab to prod floor)
     question on rational - (boxley) - (2)
         Not much - (scoenye) - (1)
             no transposition error, different network - (boxley)

Life was hard for the pioneers, but every now and again, someone would get out the fiddle and make it all worse.
69 ms