The name is misleading, because we're doing some magic to figure out what server name to obtain a certificate for. In other words, `listen example.org:443` would actually listen without binding to a particular IP address (same as `listen :443`).
This allows us to easily add other kind of toplevel directives, e.g. for global configuration options.
Simon Ser