My personal project web server has done this for years with just some basic nginx configuration.
You only find my webpage if the SNI contains the host name. If you connect using the bare IP, it presents a self-signed certificate. If you accept it, it just returns a bare 404 Not Found.
hollow-moe 1 days ago [-]
If applicable you could even use wildcard certificates to avoid having your subdomains domains showing in CT logs.
MarkWayneNewton 2 days ago [-]
> Your NetScaler talks to strangers
talk to your servers about stranger danger.
Rendered at 13:24:58 GMT+0000 (Coordinated Universal Time) with Vercel.
You only find my webpage if the SNI contains the host name. If you connect using the bare IP, it presents a self-signed certificate. If you accept it, it just returns a bare 404 Not Found.
talk to your servers about stranger danger.