how is https so different than http in dns

hc's picture

I have noticed now and then that if
I use https instead of http accidentally
that I can get really inexplicable results.

For example I put in firefox:
https://communicateordie.com

And I got a certificate complaint about
https://supportcollegedemocrats.org

How could that possibly occur? (The browser was firefox 2009 and the dns is provided by charter internet. I suppose this is a charter-ism? Very strange.
check this out:

nslookup supportcollegedemocrats.org
Server: x.charter.com

Non-authoritative answer:
Name: supportcollegedemocrats.org
Address: 216.235.252.171

nslookup communicateordie.com
Server: x.charter.com

Non-authoritative answer:
Name: communicateordie.com
Address: 216.235.252.171

Well at least it wasn't the 'Conservatives
against unions' web site :-)

Fate's picture

2 domains point to the same

2 domains point to the same IP address. Likely there is a firewall or other routing device set up to point anything on the HTTPS port to the other IP. We use this here. We have 2 pieces of equipment sharing an IP address. Our SPAM firewalls web configuration interface is accessible by redirecting anything to port 443 (HTTPS) to it. All other ports are directed to our mail server.

The other way to do this is if you are running multiple web sites off a single server. Usually you would use to define the host and then Apache would have to figure out what website to serve depending on the packets rather than what port/IP they are coming from. If you did and didn't have any other virtual hosts using that port then whenever a request was made using HTTPS then Apache would serve that page up.

hc's picture

how does communicateordie.com go to collegedemocrats.com

huh?
There are not the same IP number:
communicateordie.com
205.237.96.181

collegedemocrats.com
216.187.103.169

205.237.96.181 is in this netblock:

WHOIS Source: ARIN
IP Address: 205.237.96.181
Country: USA - Massachusetts
Network Name: NORTH-EAST-DATA
Owner Name: North East Data Vault
From IP: 205.237.96.0
To IP: 205.237.111.255
Allocated: Yes

whereas 216.187.103.169 is in this netblock:
ARIN
216.187.103.169
USA - New York
PEER1-BLK-02
Peer 1 Network Inc.
216.187.64.0
216.187.127.255
Yes

These 2 ip numbers should not be routed to the same place.
I think this kind of phenomenon has to occur at the dns
level.