HTTPS-free daim ntawv pov thawj: raws li cov lus qhia uas tau txais

Yog hais tias koj sau tej ntaub ntawv tseem ceeb nyob rau hauv nws lub website (xws li e-mail thiab password), ces koj yuav tsum tau muaj kev ruaj ntseg. Ib tug ntawm qhov zoo tshaj plaws txoj kev uas yuav tiv thaiv tau koj tus kheej - los pab kom HTTPS daim ntawv pov thawj, los yog raws li SSL (Luag Nyob Txheej) tias txhua yam ntaub ntawv muab qhia rau koj rau zaub mov thiab los ntawm nws yog txiav encrypted. HTTPS daim ntawv pov thawj tiv thaiv hackers txhawm rau koj cov neeg siv 'ntaub ntawv thaum lub sij hawm cia thereof nyob rau hauv Internet. Lawv yuav muaj kev nyab xeeb thaum lawv pom qhov HTTPS daim ntawv pov thawj thaum tus txheejtxheem koj qhov chaw, - paub hais tias nws yog kev tiv thaiv los ntawm ib tug ruaj ntseg daim ntawv pov thawj.

Zoo HTTPS daim ntawv pov thawj

Qhov zoo tshaj plaws nyob rau hauv lub SSL daim ntawv pov thawj, raws li nyob rau hauv HTTPS - yog hais tias nws yooj yim mus teev, thiab ib zaug tias yog ua li cas, koj yuav tsum tau xa cov neeg siv HTTPS daim ntawv pov thawj es tsis txhob ntawm HTTP. Yog hais tias koj sim mus saib tau koj qhov chaw, muab https: // rau koj URL txoj cai tam sim no, koj yuav tau txais ib tug HTTPS daim ntawv pov thawj kev ua yuam kev. Qhov no yog vim hais tias koj tsis tau ntsia ib tug SSL daim ntawv pov thawj HTTPS. Tab sis tsis txhob txhawj - peb yuav teeb tam sim no!

Koj qhua yuav xav tias kev ruaj ntseg nyob rau hauv koj qhov chaw thaum lawv pom qhov HTTPS daim ntawv pov thawj thaum tus txheejtxheem koj qhov chaw - paub hais tias nws yog kev tiv thaiv los ntawm ib tug ruaj ntseg daim ntawv pov thawj.

Yuav ua li cas yog HTTPS?

HTTP los yog HTTPS yog tso tawm nyob rau thaum pib ntawm lub URL-qhov chaw nyob ntawm txhua Web site nyob rau hauv ib tug Web browser. HTTP - HyperText Hloov raws tu qauv, thiab S nyob rau hauv HTTPS - Luag. Nyob rau hauv kev, nws qhia txog ib tug raws tu qauv uas cov ntaub ntawv yuav raug xa mus ntawm koj tus browser thiab lub website koj nyob nraum saib.

HTTPS daim ntawv pov thawj qhia tias txhua kev sib txuas lus ntawm koj tus browser thiab lub website uas koj saib yog encrypted. Qhov no txhais tau tias nws muaj kev ruaj ntseg. Tsuas yog xa thiab tau txais computers tau pom cov ntaub ntawv thaum Identify cov ntaub ntawv (lwm tus yuav saib tau nws, tab sis nyeem tsis tau nws). Nyob rau kev ruaj ntseg qhov chaw Web browser qhia txog ib tug xauv icon nyob rau hauv lub URL-chaw nyob qhia rau koj.

HTTPS yuav tsum nyob rau tej website uas sau passwords, them nyiaj, ntaub ntawv kho mob los yog lwm yam rhiab cov ntaub ntawv. Tab sis yog hais tias koj yuav tau txais dawb thiab ib tug siv tau SSL daim ntawv pov thawj rau koj sau?

Yuav ua li cas puas muaj tus tiv thaiv ntawm ib tug website?

Yuav kom pab HTTPS kev ruaj ntseg daim ntawv pov thawj, koj yuav tsum nruab ib lub SSL (Luag Ntsawb Txheej). Nws muaj ib tug pej xeem tseem ceeb, uas yog tsim nyog rau kev ruaj ntseg pib ntawm qhov kev sib kho. Thaum thov los ntawm HTTPS-kev twb kev txuas mus rau ib tug web page, lub site xa ib SSL daim ntawv pov thawj nyob rau hauv koj tus browser. Ces lawv pib ib tug "sib tuav tes SSL», uas muaj xws li cov kev sib cais ntawm "secrets" tsim kom muaj ib tug ruaj ntseg kev twb kev txuas ntawm koj tus browser thiab ib lub website.

Standard thiab advanced SSL

Yog hais tias ib qhov chaw siv ib tug txheej txheem SSL daim ntawv pov thawj, koj yuav pom ib tug xauv icon nyob rau hauv lub URL-qhov chaw nyob ntawm lub browser. Yog hais tias koj siv cov ntawv pov thawj ncua Validation (EV), qhov chaw nyob bar los yog ib tug URL-chaw nyob yuav ntsuab. EV SSL SSL qauv ntau tshaj cov qauv. EV SSL daim ntawv pov thawj muab lub sau tswv cwm pwm. Muab EV SSL daim ntawv pov thawj kuj yuav tsum tau thov kev pab rau undergo ib txoj kev ntsuam xyuas cov txheej txheem kom paub tseeb lawv authenticity thiab cov tswv cuab.

Yuav ua li cas yuav tshwm sim yog tias koj siv lub HTTPS tsis muaj ib tug daim ntawv pov thawj?

Txawm hais tias koj lub website tsis tau txais los yog kis rhiab cov ntaub ntawv, muaj ob peb yog vim li cas yog vim li cas tej zaum koj yuav xav kom muaj ib tug ruaj ntseg web site thiab siv cov dawb thiab siv tau SSL daim ntawv pov thawj rau koj sau.

Sawv cev. SSL yuav ua tau kom lub sij hawm nws yuav siv sij hawm mus thauj cov nplooj ntawv.

Nrhiav cav Optimization (SEO). Google tus lub hom phiaj yog hais tias lub internet yog muaj kev ruaj ntseg thiab kev nyab xeeb rau tag nrho cov, tsis yog rau cov neeg uas siv Google Chrome, Gmail thiab Drive, piv txwv li. Lub tuam txhab hais tias cov kev ruaj ntseg yuav tsum muaj ib tug zoo tshaj ntawm yuav ua li cas lawv rank chaw nyob rau hauv kev nrhiav tau. Thaum no yog tsis txaus. Txawm li cas los, Yog hais tias koj muaj ib tug ruaj ntseg website, thiab koj competitors tsis, koj qhov chaw yuav tau txais ib tug ntau dua qib, tej zaum nws yuav tsim nyog los ua kom nws muaj koob meej nrog cov kev tshawb fawb tshwm sim nplooj.

Yog hais tias koj qhov chaw yog tsis muaj kev tiv thaiv thiab nws sau passwords los yog credit card, cov neeg siv Chrome 56 (muab nyob rau hauv Lub ib hlis ntuj 2017) yuav pom ib tug ceeb toom tias lub tsev kawm ntawv yog tsis zoo. Cov neeg tuaj saib uas tsis paub nrog cov technology, (feem ntau website neeg siv) tej zaum yuav yuav raug saib lub qhov rais «HTTPS daim ntawv pov thawj kev ua yuam kev" thiab tawm ntawm koj qhov chaw, tsuas yog vim hais tias lawv tsis to taub dab tsi nws txhais tau tias. Nyob rau lwm cov tes, yog tias koj qhov chaw muaj kev tiv thaiv, nws yuav ua tau cov neeg tuaj xyuas ntau ntawm cov yooj yim, uas yuav ua rau kom qhov yuav hais tias lawv yuav sau nyob rau hauv tsab ntawv rau npe los yog tawm ib saib rau ntawm koj qhov chaw. Google muaj ib tug ntev-lub sij hawm txoj kev npaj, los qhia tag nrho cov HTTP-qhov chaw raws li tsis zoo nyob rau hauv Chrome.

Kuv yuav tau ib tug dawb HTTPS daim ntawv pov thawj?

Koj yuav tau txais SSL-daim ntawv pov thawj los ntawm ib tug pov thawj txoj cai. Cov ntawv pov thawj yog siv tau rau 90 hnub, tab sis nws yog pom zoo qhov yuav ncua ntxiv ntawm 60 hnub. Ib txhia txhim khu kev qha qhov chaw ntawm free:

• Cloudflare: Dawb rau tus kheej websites thiab blogs.
• FreeSSL: free rau koom haum thiab pib-ups thaum lub caij; yuav ua tsis tau ib tug Symantec neeg, Thawte, GeoTrust thiab RapidSSL.
• StartSSL: daim ntawv pov yog siv tau rau 1 mus rau 3 xyoo.
• Godaddy: daim ntawv pov rau qhib-qhov chaw tej yaam num, siv tau rau 1 xyoo.

Ntaus daim ntawv pov thawj thiab nws cov validity nyob rau hauv lub qhov chaw. Feem ntau cov tsoom fwv muaj txuj SSL daim ntawv pov rau dawb thiab them nqi rau EV SSL daim ntawv pov yog hais tias lawv muab lawv. Cloudflare muaj dawb thiab them lub hom phiaj thiab ib tug ntau yam ntxiv kev xaiv.

Yuav ua li cas koj yuav tsum tau muab los xav thaum tau txais ib qho SSL daim ntawv pov thawj?

Ntawm no, Google xav ib daim ntawv pov thawj nrog ib tug 2048-ntsis qhov tseem ceeb. Yog hais tias koj twb muaj ib tug 1024-ntsis daim ntawv pov thawj, uas yog weaker, nws yog pom zoo kom hloov.

Koj yuav tau txiav txim tias koj xav tau ib tug, ntau yam puav los yog ib tug wildcard daim ntawv pov thawj:

1. Ib daim ntawv pov thawj yog siv rau ib tug sau (e.g., www.example.com).
2. Multi-sau daim ntawv pov thawj yuav tsum tau siv rau ob peb zoo-paub sau (e.g., www.example.com, cdn.example.com, example.co.uk).
3. Daim ntawv pov thawj wildcard yog siv los luag sau nrog ntau dynamic subdomains (e.g., a.example.com, b.example.com).

Yuav ua li cas rau nruab ib SSL daim ntawv pov thawj?

Koj web hosting yuav nruab ib daim ntawv pov thawj rau dawb los yog rau ib tug nqi. Ib txhia fwjchim luj kawg nkaus yeej muaj teeb Wb Encrypt kev xaiv nyob rau hauv koj cPanel tus kheej account, uas simplifies lub lag luam. Nug koj tus tam sim no tus tswv tsev los yog nrhiav ib tug uas muaj direct them nyiaj yug rau peb Encrypt. Yog hais tias tus tswv tsev tsis muaj qhov kev pab no, koj qhov kev pab lub tuam txhab web site los yog tsim tawm yuav nruab ib lub daim ntawv pov thawj rau koj. Koj yuav tsum tau npaj kom txhij rau lub fact tias koj yuav tsum hloov cov ntaub ntawv pov thawj yog heev. Kos rau lub sij hawm nrog lub daim ntawv pov thawj.

Yuav ua li cas lwm tus ua li cas?

Tom qab tau thiab txhim kho SSL-daim ntawv pov thawj uas koj yuav tau los tswj SSL rau koj qhov chaw. Ib zaug ntxiv, koj muaj peev xwm nug koj tus web party kev pab cuam lub tuam txhab los yog tsim tawm los ua qhov kev txiav txim. Txawm li cas los, Yog hais tias koj xav mus ua koj tus kheej, thiab koj qhov chaw powered by WordPress, koj muaj peev xwm ua tau li ntawd los daus, txhim kho thiab siv cov plugin. Thaum kawg version nco ntsoov xyuas compatibility nrog koj version ntawm WordPress.

Ob tug nrov plugin for yuam SSL: yooj yim SSLWP, yuam SSLSSL-plugin. Nco ntsoov mus ua ib tug thaub qab daim ntawv luam ntawm koj lub website thiab tau ceev faj heev thaum koj ua qhov no. Yog hais tias koj misconfigured ib yam dab tsi, nws yuav muaj dire txim: qhua yuav tsis pom koj qhov chaw, dluab yuav tsis tso tawm, cov scripts tsis loaded, uas yuav cuam tshuam rau txoj kev tej yam uas nyob rau hauv koj qhov chaw muaj nuj nqi, xws li typography thiab xim yuav tsis tso tawm kom txoj kev.

Koj yuav tsum redirect cov neeg siv thiab nrhiav xyaw rau cov HTTPS-page siv 301 redirect nyob rau hauv lub .htaccess ntaub ntawv nyob rau hauv lub hauv paus nplaub tshev rau lub neeg rau zaub mov. Lub .htaccess ntaub ntawv yog invisible ntaub ntawv, yog li kom paub tseeb tias koj FTP kev pab cuam yog teem los qhia thaum cov ntaub ntawv. Nyob rau hauv Filezilla, piv txwv li, mus rau neeg rau zaub mov> Yuam saib thaum cov ntaub ntawv. FileZillaBefore, ua ntej yuav muab ib tug redirect, nws yuav tau ib tug zoo lub tswv yim yuav rov qab mus rau koj tus .htaccess cov ntaub ntawv. Nyob rau hauv neeg rau zaub mov ib ntus rename cov ntaub ntawv los ntawm tshem lub sij hawm (uas ua rau nws pom nyob rau hauv thawj qhov chaw), download tau cov ntaub ntawv (uas yuav tam sim no yuav pom nyob rau hauv koj lub computer raws li ib tug tshwm sim ntawm qhov kev tshem tawm lub sij hawm), ces ntxiv rov qab mus rau lub sij hawm uas cov neeg rau zaub mov.

Kho kom raug Google Analytics chaw

Tom qab ua cov kauj ruam, koj yuav tau hloov lub nyiam URL-chaw nyob nyob rau hauv koj Google Analytics nyiaj mus tso saib koj sau HTTPS-version. Txwv tsis pub, koj tsheb statistics yuav muaj neeg xiam, vim hais tias cov version ntawm HTTP URL-chaw nyob yog pom raws li ib tug txawv kiag li version ntawm qhov chaw ntawm ib tug HTTPS daim ntawv pov thawj. Google Nrhiav Console Console considers HTTP thiab HTTPS raws li zoo li cais puav, li ntawd, ntxiv HTTPS sau account. Nco ntsoov tias, thaum koj hloov los ntawm HTTP rau HTTPS daim ntawv pov thawj yog tias koj qhov chaw muaj ib tug tshwj xeeb kev nkag qhov tseem ceeb, lub txee yuav rov pib dua.