Hacker News Reader

Hardly reasonable. Domains are (in reality, if not in legislative fantasy) property of ICANN and merely rented by everyone else.

View on HN

So? If we qualify it to preventing unauthorized use of one of their rented domains does that make it any less reasonable?

The conceit here is that you must be "authorized" in order to write an app that puts the domain in question into the SNI field of a TLS connection that it initiates. I don't think that's reasonable.

It is of course up to Amazon what their servers then do when presented with such a connection, in particular whether they ensure the Host: header later presented matches the SNI data.

So have they obtained the permission of ICANN? I rent my home, but I still call the police if there's a trespasser.

Reply on news.ycombinator.com