On Jan 12, 2017, at 2:39 PM, Cory Benfield <cory@lukasa.co.uk> wrote:

I'm not even sure about the specific API we're using for SNI: I might just want to restrict it to emitting new certificates.