Heroku offers the option to use Hostname based SSL. Apparently this is a solution which they use to offer multiple SSL hostnames on the same IP address, without using SNI (which doesn't work on Windows XP).
From the website:
Hostname based SSL works with all browsers. Use it when you will be accessing you site via SSL on a subdomain such as www.myapp.com, secure.myapp.com or *.myapp.com. Hostname based SSL will not work with root domains as it relies on CNAME aliasing of your custom domain names. CNAME aliasing of root domains is an RFC violation.
So how exactly does this work? Does it mean that they request you to add a CNAME alias to your domain and then issue a certificate for the CNAME (e.g. www.mydomain.com -> secure.heroku.com, upon visiting www.mydomain.com, a certificate for secure.heroku.com is presented). Does such a thing work? If it does not do that, then what does it do?
