Server Name Indication extension

E258090

The Server Name Indication (SNI) extension is a TLS protocol feature that allows a client to indicate the hostname it is trying to connect to at the start of the handshake so that the server can present the correct certificate for virtual hosting.

All labels observed (4)

How this entity was disambiguated

Statements (47)

Predicate Object
instanceOf TLS extension ⓘ
protocol feature ⓘ
allows client to specify the server name it is connecting to ⓘ
alsoKnownAs SNI ⓘ
appliesTo TLS client ⓘ
carriedIn ClientHello message ⓘ
category TLS extension for server name indication ⓘ
definedIn RFC 6066 ⓘ
enables hosting providers to serve many domains from one IP ⓘ
multiple HTTPS sites on a single IP address ⓘ
server to select appropriate certificate ⓘ
virtual hosting with TLS ⓘ
extensionTypeValue 0 ⓘ
hasConstraint server must support SNI to select correct certificate ⓘ
hasEffectIfUnsupported server may present default certificate ⓘ
hasField host_name ⓘ
server_name_list ⓘ
server_name_type ⓘ
hasPurpose indicate server hostname during TLS handshake ⓘ
support name-based virtual hosting over TLS ⓘ
hasSuccessor Encrypted Client Hello ⓘ
identifiedBy TLS extension type server_name ⓘ
improves certificate selection for multi-tenant servers ⓘ
introducedIn TLS 1.0 era ⓘ
originallyDefinedIn RFC 3546 ⓘ
partOf TLS protocol ⓘ
Transport Layer Security ⓘ
linked to: TLS
privacyConsideration allows passive observers to learn target hostname ⓘ
processedBy TLS server ⓘ
relatedTo HTTPS ⓘ
TLS certificate management ⓘ
name-based virtual hosting ⓘ
requiredBy many modern HTTPS virtual hosting configurations ⓘ
securityProperty exposes requested hostname in cleartext in ClientHello ⓘ
standardizedBy IETF ⓘ
supportsNameType host_name ⓘ
usableWith TLS 1.0 ⓘ
TLS 1.1 ⓘ
TLS 1.2 ⓘ
TLS 1.3 ⓘ
usedBy HTTPS clients ⓘ
TLS client libraries ⓘ
content delivery networks ⓘ
reverse proxies ⓘ
web browsers ⓘ
usedInPhase TLS handshake ⓘ
usesEncoding ASCII for DNS hostnames ⓘ

How these facts were elicited

Referenced by (6)

Full triples — surface form annotated when it differs from this entity's canonical label.

RFC 3546 → defines → Server Name Indication extension ⓘ
TLS Working Group → responsibleFor → TLS SNI extension ⓘ
linked to: Server Name Indication extension
RFC 6066 → defines → Server Name Indication extension ⓘ
Encrypted Client Hello → replaces → Encrypted Server Name Indication ⓘ
linked to: Server Name Indication extension
RFC 4366 → definesExtension → Server Name Indication ⓘ
linked to: Server Name Indication extension
Trusted CA Indication extension → relatedTo → Server Name Indication extension ⓘ