Re: [TLS] Connection diversion to other subdomains

[Matt McCutchen <[e-mail]>]

On Thu, 2010-10-28 at 21:20 -0700, [e-mail] wrote:
> On Wed, Oct 27, 2010 at 9:01 PM, Matt McCutchen <[e-mail]> wrote:
> 
> [re SNI and Host header mismatch]
> > How can I get the message out to holders of wildcard certificates that
> > they should prevent this attack?
> 
> First, what would your proposed remedy be?  What do you think the best
> behavior would be?  Where would you put whatever check you propose in
> the processing chain of the server?

If a web server gets a request over TLS with a Host header that doesn't
match any of the sites it is supposed to serve, it should return an HTTP
error instead of serving content from some "default" site.  Ideally, the
error should not convey false information about the real server (e.g.,
404 would be bad).  There's no error code that exactly fits the
situation; 400, 403, and 503 are decent.  Perhaps a new error code could
be allocated.

If the server gets a TLS connection with a bad server_name extension, it
would be even better to go ahead and fail the handshake with an
"unrecognized_name" error.  Apache mod_ssl currently is not capable of
doing this; I might enter an enhancement request.

-- 
Matt