I'm testing MTA-STS, a newish security scheme for e-mail. For each of the 90 mail domains I host, it requires a web site at https://mta-sts.domain. I have written a server using http.server that serves them all from one shared IP and gets the appropriate web cert and domain info from local folders. It works fine but the http.server module and documentation all say DO NOT USE THIS IN PRODUCTION because it is too fragile. So what should I use? I have looked at all of the usual web frameworks from django down to bottle and cherrypy and none of them handle SNI other than indirectly through WSGI and virtual hosts from Apache or the like. I don't want to edit a large Apache config file every time I add or remove a domain.

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Browse other questions tagged or ask your own question.