Hacker News Reader

Shodan also scans via domains to identify the proper certificate for websites that require a valid SNI.

Interesting, some results out of Shodan were surprising - this might be the reason. How do you pick what domains to try?

We have a database of 400+ million hostnames that we scan each month.

So if a host supports SNI you send it 400+mil requests? C'mon, dish.

Btw you can also see the info we have for a domain using our DNSDB. For example, if you have the latest version of our CLI:

shodan domain uber.com

I haven't seen that, maybe if you manually request a scan, then.