существуют сертификаты SSL там, которые используют Подчиненное Поле имени Высокого звука сертификатов для достижения, это, GoDaddy, делает много сертификат домена UCC некоторое время больше, чем средний SSL, однако более старая поддержка браузера неоднородна в лучшем случае (кому нужен IE6 так или иначе ;))
If you don't want your system to use those entries in your host file, why can't you simply remove them?
Do you have other enteries in your host file that you do need to be served? You could just have DNSMasq skip the system-wide host file --no-hosts
, and you can point DNSMasq at an alternate hosts file that has the entries you want --addn-hosts
.
-h, --no-hosts
Don't read the hostnames in /etc/hosts.
-H, --addn-hosts=<file>
Additional hosts file. Read the specified file as well as /etc/hosts.
If -h is given, read only the specified file. This option may be
repeated for more than one additional hosts file.
I dont know whether dnsmasq supports this or not, but from the description of what you are trying to achieve, it sounds like setting up bind would be a more elegant solution. That way, you can keep your hosts file and DNS forwarding / resolution completely separate.