Patent ID: 9015469
Filing Date: 2015-04-21
Classification: H04L,H04W

Abstract:
1. A method in a proxy server, comprising: receiving a first secure session request from a first client device for a secure session, wherein the first secure session request is received at the proxy server as a result of a DNS (Domain Name System) request for a first domain resolving to an IP address of the proxy server, wherein the first domain is one of a plurality of domains that resolve to the IP address of the proxy server, and wherein the first secure session request does not include a name of the first domain; retrieving a digital certificate associated with the IP address of the proxy server, wherein the digital certificate is bound to the first domain and a set of one or more other domains; participating in a secure session negotiation with the first client device including transmitting the digital certificate to the first client device and establishing session keys for the secure session between the first client device and the proxy server; after establishing the secure session between the first client device and the proxy server, receiving an encrypted first request from the first client device for an action to be performed on a resource; decrypting the encrypted first request using at least some of the established session keys for the secure session between the first client device and the proxy server; determining, from the decrypted first request, that the first domain is a destination of the first request; participating in a secure session negotiation with a first origin server that hosts the first domain including, after establishing a secure session between the proxy server and the first origin server, encrypting the decrypted first request using the at least some of the established session keys for the secure session between the proxy server and the first origin server; and transmitting, to the first origin server, the encrypted first request that was encrypted using at least some of the established session keys for the secure session between the proxy server and the first origin server.