Implement proxy side of more robust SNI checking