HTTPS support for geo DNS mirrors

Hi all, (apologies if this has been discussed already, I couldn't find existing discussion of it) We operate the nz2.php.net mirror, which I believe is currently the main New Zealand mirror, with the shutting-down of nz1 a few months ago. Furthermore, since the geo DNS changes in January we're now serving up www.php.net for NZ clients. I've just had a member of the public approach me regarding a certificate error on www.php.net. As it stands the only valid name on the certificate we serve up is the canonical name of our mirror service: mirrors.catalyst.net.nz, and this has caused a warning dialog to show in their browser. Given that a Google search for "php" produces an https://www.php.net/ link as the top result, has any consideration been given to making the TLS situation better with geo DNS? A survey of some of the other mirror sites seems to suggest nobody has a cert for which 'www.php.net.nz' is valid, and some don't support HTTPS at all. -- Michael Fincham, Senior Systems and Network Administrator Catalyst.net.nz Phone:+64 4 499 2267

Attachment: [application/pgp-signature]