Search code examples
securitysslend-to-end

Using IP address vs host name in end-to-end request with SSL

So, note that this is not about browser-server communication. In server-to-server communication, would using the other server's IP address to make a request, as opposed to using its host name, reduce the likelyhood of MITM attack?

Solution

  • If you have all Systems (including DNS) under your control, use the Domain Name. The risk for MITM attacks via DNS are as high as MITM via IP Spoofing. But you could move an application much better. You could just move the Domain Name.

    If you have a valid, public signed SSL cert, you have the benefit that you don't need to buy a new one, if the IP changes.

    If you don't have control over the other side, and worry about MITM: Don't connect to the system!