I mentioned in a previous post that an SSL connection will typically use a Server Name Indication in the initial (unencrypted) packet to let the server know which address it is interested in. This allows the server to do things such as select the appropriate certificate to answer this initial challenge.

Read full news article on Dzone