> I'd go with SAN because it's normally cheaper than a wildcard and one IP > because Apache already handles teh vhosts based on DNS which means we can > use the same tuple of IP and port and one certificate for all domains. Single IP means, that we'd have to use SNI, right? And if we use SNI no Internet Explorer user on Windows XP will be able to reach any of our sites, right? Or am I missing something here? Andi -- splitbrain.org