Hacker News Reader

What if the IP is dynamic? Say an Azure Cloud Service.

I think the problem is that you'd need a different X.509 certificate for TLS, for each and every single IP.

The certificate is issued for the domain, not the IP.