I know with http sites I can configure it to listen for specific hostnames and you can add several bindings, it ignores the rest which is great. I also know I can rename my ssl cert friendly name to get that box available for ssl binding. The problem is I need to accept ssl to www.site.com and site.com but I only get one binding with a ssl cert. Whichever one I don't bind won't be served.
How can i configure my site to only respond to ssl requests for site.com and www.site.com but ignore everything else? I have a separate http site we'll call badsite.com which is going to this one if the user types https, because this site is listening to all https.
I can't choose between ssl to www.site.com and site.com as i need to accept both, but I want to drop, rewrite, error or otherwise not permit anything else on port 443 requests.