Which of the following statements are true regarding Server Name Indication (SNI)?

Server Name Indication (SNI) is an extension to the Transport Layer Security (TLS) protocol that allows a client to indicate which hostname it is trying to connect to at the start of the handshaking process1. This enables the server to present the appropriate certificate for the requested hostname, and thus allows multiple SSL/TLS secured virtual HTTP hosts to coexist on the same IP address12. SNI does not support transparent failover of TLS sessions from one web server to another, as this would require session resumption or renegotiation mechanisms1. SNI does not enable HTTP servers to update the DNS of their virtual hosts’ names using the X 509 certificates of the virtual hosts, as this would require a different protocol such as Dynamic DNS1. SNI does not provide a list of available virtual hosts to the client during the TLS handshake, as this would expose the server’s configuration and potentially compromise its security1. SNI submits the host name of the requested URL during the TLS handshake, as this is the information that the client needs to communicate to the server in order to select the correct certificate12. References:

Server Name Indication - IBM

Server Name Indication - Wikipedia