SNI Custom SSL vs Dedicated IP Custom SSL


Server Name Indication (SNI) Custom SSL Dedicated IP Custom SSL Relies on the SNI extension of the TLS protocol, which allows multiple domains to serve SSL traffic over the same IP address. Offers the same level of security when using Dedicated IP Custom SSL. If you configure CloudFront to serve HTTPS requests using SNI, CloudFront associates your alternate domain name with an IP address for each edge location. The IP address to your domain name is determined during the SSL/TLS handshake negotiation, and isn't dedicated to your distribution. Some older browsers do not support SNI and will not be able [...]