[captncraig]

Do you own a huge block of IPs or something? We have a massive monster cert in order to support non sni on a single ip. I hate it.

[kuschku]

That wouldn't avoid the issue, actually — I need to put a dozen domains in the same IP space with one cert to get this security property.

Otherwise an adversary could simply see what IPs you connect to and reverse DNS them.