是否可以为 IP 地址而不是域名提供 SSL 证书? [英] Is it possible to have SSL certificate for IP address, not domain name?

问题描述

我希望我的网站使用像 http://192.0.2.2/... 和 https://192.0.2.2/... 这样的 URL 来表示静态内容以避免请求中不必要的 cookie 并避免额外的 DNS 请求.

I want my site to use URLs like http://192.0.2.2/... and https://192.0.2.2/... for static content to avoid unnecessary cookies in request AND avoid additional DNS request.

有没有什么办法可以为此目的获得 SSL 证书?

Is there any way to obtain SSL cert for this purpose?

推荐答案

根据 这个答案，有可能，但很少使用.

According to this answer, it is possible, but rarely used.

至于如何获取:我倾向于简单地尝试向您选择的提供商订购一个，并在订购过程中输入 IP 地址而不是域.

As for how to get it: I would tend to simply try and order one with the provider of your choice, and enter the IP address instead of a domain during the ordering process.

但是，在 IP 地址上运行站点以避免 DNS 查找对我来说听起来像是不必要的微优化.您最多可以节省几毫秒，即每次访问，因为 DNS 结果缓存在多个级别.

However, running a site on an IP address to avoid the DNS lookup sounds awfully like unnecessary micro-optimization to me. You will save a few milliseconds at best, and that is per visit, as DNS results are cached on multiple levels.

从优化的角度来看，我认为您的想法没有意义.

I don't think your idea makes sense from an optimization viewpoint.

这篇关于是否可以为 IP 地址而不是域名提供 SSL 证书?的文章就介绍到这了，希望我们推荐的答案对大家有所帮助，也希望大家多多支持IT屋！