Mobile app version of vmapp.org
Login or Join
BetL925

: Bing and lack of SNI support I invested a few hours yesterday investigating why my site is ranked highly in Google but not indexed at all in Bing. Trial and error using the "Fetch as Bingbot"

@BetL925

Posted in: #Bing #Https

I invested a few hours yesterday investigating why my site is ranked highly in Google but not indexed at all in Bing. Trial and error using the "Fetch as Bingbot" tool led me to the conclusion that Bing does not support SNI (Server Name Indication).

Some articles and blogs support my conclusion that Bing doesn't support SNI while other responses on this forum suggest that it does. Any official word on this from Microsoft? If so, I can't seem to find it. I'm at a bit of a loss.

Based on the somewhat shocking (and hopefully incorrect) premise that BingBot does not in fact support SNI, it seems I have three possible alternatives:


(1) Revamp my currently HTTPS-only site so that the public content is available via HTTP. Bing would then be able to index it.
(2) Eliminate the SNI requirement. My CDN, Amazon Cloudfront, allows this. This approach demands that each server on Amazon's CDN edge network, potentially dozens (hundreds?) of them, have its own unique IP address which would be solely dedicated to serving up HTTPS requests with my certificate. It's grossly inefficient and furthermore, this approach requires special permission from Amazon and is quite costly since spare IPv4 addresses are at a premium right now.
(3) Ignore Bing.


Option #1 is a major pain and #2 is very expensive. The idea of going through all of this hassle to support a less capable, second-rate search engine like Bing is anathema to me but at the same time, if there's some easy solution that I'm missing, I'd be more than happy to apply it.

Any ideas?

10.02% popularity Vote Up Vote Down


Login to follow query

More posts by @BetL925

2 Comments

Sorted by latest first Latest Oldest Best

 

@Correia994

I have been emailing with Bing support for several weeks now and as of today, they started to offer limited support for SNI.

I made clear to them that the issue was 100% sure in their lack of SNI support by moving one of my websites to a dedicated IPv4 and turning off SNI for that address. After that, the sitemap got succesfully verified by Bing. All other HTTPS websites/sitemaps that are on the same server, but on the shared IPv4 address, were not indexed. Seems like they finally started implementing SNI!


We highly appreciate your patience as we review this matter together with our Product Group. My name is Jenny and I will be providing you with the status of this Service Request.

We would like to inform you that as of today, Bing only supports a limited number of SNI websites through a whitelist. We understand that more and more websites are switching to SNI so we plan to expand our support for all SNI hosts in the next 6 months.

As a short term mitigation, we can whitelist about 10 - 20 SNI hosts for you, if needed.


So if you would like to have your SNI website added to the whitelist, I'd recommend sending Bing Support an email so that your SNI websites will be succesfully indexed.

10% popularity Vote Up Vote Down


 

@Heady270

I'm using a single certificate for multiple domain names using the "certificate subject alt name" feature. Bing does understand this type of certificate. I just tested it using "fetch as bingbot".

This would be another possible solution for you. You need to generate a single certificate with all your domain names in it. Because it is a single certificate it is all hosted with a single IP address.

The disadvantages are:


All your domains are linked by the certificate.
If you want to add a domain name you need to generate a new certificate and install it.


I'm using startssl.com/ as my certificate authority for this.

10% popularity Vote Up Vote Down


Back to top | Use Dark Theme