Yuav ua li cas yuav ua rau ib tug HTTPS kev twb kev txuas? Yuav ua li cas yog qhov txawv ntawm qhov chaw rau HTTPS los yog HTTP?

Lub ntiaj teb no network ntawm scammers thiab hackers nyob rau txhua hnub sim mus nyiag tej ntaub ntawv. Nyob rau hauv lub dhau los lawm, feem ntau nrov txoj kev kidnapping twb ntshai li phishing. Lub attacker xyoo cov thawj qhov chaw, thiab cov ntaub ntawv los ntawm tus neeg siv lub caij nplooj zeeg mus rau hauv nws ob txhais tes (passwords, card numbers, private lus, thiab thiaj li nyob. N.). Yuav kom daws tau qhov teeb meem no tsim ib tug ruaj ntseg HTTPS kev twb kev txuas. Yog li ntawd, qhov chaw cov thawj coj yog feem ntau muaj kev txhawj xeeb txog yuav ua li cas los tsim thiab kho ib tug ruaj ntseg kev twb kev txuas https.

Yuav ua li cas yog HTTPS thiab yog vim li cas yog nws tsim nyog

ib tug HTTPS kev twb kev txuas ua ntej koj mus rau ntawm qhov chaw yog tsim nyog los nkag siab txog dab tsi nws yog ib thiab yuav ua li cas nws ua hauj lwm. HTTPS yog ib tug ruaj ntseg version ntawm HTTP (lub Hypertext Hloov raws tu qauv), qhov tsim nyog cov ntaub ntawv yog kis rau nws rau cov nplooj ntawv (browser npe, screen daws teeb meem, lub xub ntiag ntawm kua nplaum uas ua li ntawm. N.).

HTTP yog siv los ntawm developers xa thiab tau txais cov tsiaj ntawv, tsis muaj tus raws tu qauv chaw yuav tsis tau los ua hauj lwm. Tag nrho cov ntaub ntawv xa mus ntawm HTTP, yav tas los yuav tau yooj yim cuam tshuam los ntawm txoj kev fake chaw (phishing).

Ib yam li ntawd, txoj kev yav tas los nyiag passwords, cov neeg siv cov npe, daim ntawv xov tooj, daim card lus, thiab lwm yam ntaub ntawv tseem ceeb. Yuav kom tiv thaiv cov neeg siv los ntawm phishing, tau invented SSL daim ntawv pov thiab xyuas lawv authenticity ua ntej sib ntaub ntawv.

Nws yog tsim nyog los siv HTTPS rau bank websites los yog online khw muag khoom noj. Yog hais tias cov kev pab no tsis yog ib cov ntawv pov thawj, tus browser yuav thaiv ib tug kev twb kev txuas, thiab yuav tso ib cov lus ceeb toom txog cov kev txaus ntshai. Raws li ib tug tshwm sim, lub chaw yuav poob txoj kev ntseeg ntawm nws cov neeg siv.

Yuav ua li cas yog lub SSL / TLS daim ntawv pov thawj

Lub ntsiab innovation nyob rau hauv lub siv HTTPS yog yuav tsum tau cov SSL daim ntawv pov thawj. Qhov no yog cov ntaub ntawv uas stores tag nrho cov ntaub ntawv (IP chaw nyob ntawm lub neeg rau zaub mov, lub teb chaws qhov chaw, E-mail rau tus tswv tsev, thiab thiaj li nyob. N.). Cov ntaub ntawv yog encrypted neeg rau zaub mov qhov chaw thiab lub CA neeg rau zaub mov (Godaddy, Comodo thiab m. P.). cov ntaub ntawv muab los piv, thiab yog hais tias lawv yog cov tib yam, cov kev twb kev txuas tseem nrog txhua kev twb kev txuas. Txwv tsis pub cov kev ruaj ntseg ceeb toom tshwm.

Muaj ntau cov txawj nyeem ntawv tsis paub yuav ua li cas yuav ua rau ib tug ruaj ntseg kev twb kev txuas https. Tus thawj txiav txim yuav tsum tau mus nrhiav tau ib tug SSL daim ntawv pov thawj los ntawm ib tug neeg chaw. Muaj ntau hom ntawm cov ntaub ntawv no:

• DV - paub meej tias tsuas yog tus sau (rau cov me chaw thiab blogs).
• OV - sau yog soj ntsuam thiab lub koom haum.
• EV - Kev ncua Validation (muaj yuav ua tau ib tug ntsuab bar thiab ntsuas phoo nyob rau hauv lub browser).

Feem ntau cov dua rau khw thiab lub tsev txhab nyiaj suav hais tias yog EV kev xaiv. Tom qab ntawd muaj ntxiv refinements nyob rau hauv daim ntawv ntawm:

• SGC (txhawb cov laus browsers).
• Wildcard (kev pab txhawb nqa subdomains).
• SAN (lwm thawj nyob rau hauv ib tug daim ntawv pov thawj).
• IDN (lub teb chaws cov nyiaj them yug www thawj).

Rau feem ntau qhov chaw, txaus siv DV SSL daim ntawv pov thawj. Nws yog pheej yig thiab muab kev tiv thaiv tiv thaiv phishing.

Yuav ua li cas txhais tau cov chaw mus rau hauv ib tug ruaj ntseg kev twb kev txuas

Qhia, cov tswv ntawm online lag luam xav nyob rau hauv yuav ua li cas los tsim ib tug ruaj ntseg kev twb kev txuas https. Rau cov kev ua yuav tau ua ib co kev hloov mus rau qhov kev pab cuam code nplooj ntawv. Qhov tseem ceeb tshaj yog los sau ib tug ntxiv txoj cai nyob rau hauv lub .htaccess cov ntaub ntawv. Nws khw muag khoom cov code siv los kho cov Web neeg rau zaub mov Apache.

Feem ntau cov web fwjchim luj kawg nkaus pub siv cov kev tswj vaj huam sib luag rau configure cov SSL daim ntawv pov thawj rau cov neeg rau zaub mov. Yog xav paub ntxiv txog yuav ua li cas ua li no, nug koj tus muab kev pab cuam. Cov tseem kawm translation txheej txheem yuav tsum tau muab faib mus rau hauv lub nram qab no theem:

1. SSL daim ntawv pov thawj.
2. Nruab ib lub daim ntawv pov thawj rau cov neeg rau zaub mov.
3. Hloov cov internal mus rau ntawm qhov chaw.
4. Teem redirect rau qhov chaw nres nkoj 301.
5. Hloov Tsoom Tub Rog tus nyob rau hauv robots.txt.

Yog hais tias koj siv ib tug them nyiaj txais hom Beget, ces hu rau Kev them nyiaj yug nrog cov ntawv pov thawj, thiab tej yam ntxiv txiav txim ua pab neeg ua hauj lwm. Cov feem ntau nyuaj kauj ruam nyob rau hauv teb cov lus nug, yuav ua li cas yuav ua rau https kev twb kev txuas, yog teem .htaccess redirect, raws li feem ntau scripts tsis pab.

Muab cov ntawv pov thawj thiab nruab nws nyob rau hauv neeg rau zaub mov

Nyob rau hauv kev tshawb xav, peb xam tawm yuav ua li cas ua ib tug https kev twb kev txuas, txav mus rau kev txiav txim. Thawj kauj ruam uas koj yuav tsum tau txais ib daim ntawv pov thawj SSL los ntawm ib tug lub audited chaw zov me nyuam. Nyob rau hauv internet koj yuav nrhiav tau ntau yam sib txawv xaiv nyob rau hauv txawv nqi yog hom twg. Thaum lub sij hawm tam sim kom muab tau cov ntaub ntawv pub dawb, muaj cov 2 center:

• WoSign.
• Startssl.

Lwm yam kev pab yuav tsum tau them nyiaj. Tus nqi nyob rau hauv lub hom daim ntawv pov thawj thiab nws cov nta ntxiv (multi-sau cov nyiaj them yug rau cov laus dua browsers, thiab hais txog. N.). cas:

• Reg.ru.
• Godaddy.
• Hostland.
• Symantec.
• Comodo.
• GlobalSign.
• Thawte.

Tsis tas li ntawd, ib co hosting muab nws cov neeg siv nrog SSL daim ntawv pov thaum koj yuav ib tug tej yam tariff txoj kev npaj. Rau ntawm qhov chaw muab ntawv pov thawj cov ntsiab lus xim qhov tsim nyog ua. Tab sis rau tag nrho cov txheej txheem muaj raws li nram no cov kauj ruam:

• Tiam CSR thov;
• filling site chaw nyob (admin @ [site address]);
• sau nyob rau hauv ntaub ntawv hais txog tus tswv ntawm lub sau (rau EV thiab OV daim ntawv).

CSR thov muaj xws li kev qhia rau cov pov thawj (sau lub npe, koom haum, lub nroog, lub xeev, lub teb chaws). Tom qab sau tawm cov lus qhia rau tus neeg siv tau txais ib tug code 2 (daim card qhov tseem ceeb thiab CSR Code), koj yeej paub hais tias mus cia lawv nyob rau hauv ib tug nyias muaj nyias ib daim ntawv no. Xa no code kom tau ib SSL daim ntawv pov thawj, thiab tos rau nws extradition los ntawm qhov chaw.

Tam sim no mus rau lub website hosting thiab nrhiav rau «SSL daim ntawv pov thawj" seem, los yog hu rau kev pab txhawb nqa. Nws yuav tsum tau muab cov lus qhia nyob rau hauv CSR code, lwm yam tseem ceeb thiab daim ntawv pov thawj. Tsis txhob hnov qab mus hloov rau SSL yug nyob rau hauv web hosting vaj huam sib luag.

Yuav ua li cas rau tsim ib tug https kev twb kev txuas rau ib tug tas mus li hauv paus

Tom qab muab cov ntaub ntawv nyob rau hauv lub neeg rau zaub mov, koj yuav tsum ua ib tug nrog configuration ntawm qhov chaw. Koj yuav tsum tau teem ib lub redirect thiab hloov tag nrho cov sab hauv kev mus los ntawm meej rau tus txheeb ze.

Hais tias yog, es tsis txhob http://site.ru/img/bg.png set: //site.ru/img/bg.png.

Yuav tsum tau muab tshem tawm los ntawm lub HTTP txuas npe. Yog hais tias nyob rau hauv tsis ntseeg, hu rau koj tus WEB-programmer los yog ib tug Freelancer, nws yog ceev kom configure. Nrhiav neeg ua tim khawv yuav ua tau los ntawm ib tug code editor rau txhua cov ntaub ntawv, los yog mus nrhiav tau tag nrho cov ntaub ntawv los ntawm ib tug nrhiav rau phpmyadmin.

Tom qab teeb li qhov cov kev mus koj yuav tsum qhia kom meej cov kev tshawb fawb xyaw ntawm qhov kev hloov. Qhib lub robots.txt ntaub ntawv thiab kab party: HTTP es tsis txhob muab tso rau HTTPS.

Es tsis txhob http://example.ru insert: https://example.ru.

Tom qab hloov cov kev tshawb fawb cov ntaub ntawv yog configured txiav redirect site ntawm HTTP rau HTTPS. Ua ntej hais plaub, xyuas cov nyob rau ntawm ib qhov chaw rau HTTPS raws tu qauv. Yog hais tias tag nrho cov kauj ruam dhau tau raug ua tiav thwj, cov kev ua yuam kev yuav tsum tsis txhob tshwm sim.

Yuav kom txiav redirect rau ib tug ruaj ntseg kev twb kev txuas, sau qhov lus no tsab ntawv nyob rau hauv .htacess ntaub ntawv ib co kev pab:

RewriteEngine rau

RewriteCond% {HTTP: X-xa-Proto} https!

RewriteRule ^ https: //% {HTTP_HOST}% {REQUEST_URI} [L, R = 301, NE]

Tab sis nyob rau hauv Feem ntau, qhov no txoj kev tsis ua hauj lwm. Nyob rau hauv cov teeb meem, thov hu rau koj tus hosting khiav dej num, nws yuav muaj peev xwm ua qhov tseeb muaj nqis. Redirect pib khiav tom qab restarting neeg rau zaub mov, feem ntau tsis pub dhau 24 teev.

Tsis tas li ntawd koj yuav tau hloov lub chaw nyob rau hauv webmaster vaj huam sib luag "Yandex" los yog Google. Yuav tsum tau nyob rau hauv lub indexing chaw mus rau lub point ntawm cov thawj daim iav thiab nruab ib lub HTTPS. Nyob rau hauv tas li ntawd, qhov yuav tsum tau txav mus rau:

• sitemap.xml;
• URL cais;
• geolocation;
• Kev mus Disawov Tool rau Google.

Nws ces tseem mus tos rau lub reindexing. Thaum lub sij hawm no lub sij hawm, ua rau lub site yog txo, tab sis, ces stabilized.

Yuav ua li cas yuav ua rau ib tug https kev twb kev txuas rau WordPress

Niaj hnub nimno blogs thiab portals mas ua hauj lwm nyob rau hauv WordPress, rau lawv mus rau https yuav tsum tau ua tib yam hauj lwm (kom tau ib tug daim ntawv pov thawj, kev hloov kev mus thiab thiaj li nyob. N.). Tab sis lawv muaj ib tug txheej ntawm ua-nyob rau hauv plug-ins uas yuav ua tau txhua cov kev ua los ntawm tus tswv:

• yooj yim HTTPS mus;
• HTTPS (SSL).

Tus thawj xyoo ua tim khawv, thiab lub thib ob tso cai rau koj kom meej ib SSL daim ntawv pov thawj. Nyob rau hauv tas li ntawd, mus rau Settings-> General. Ntawm no koj yuav tau hloov qhov URL thiab qhia kom meej rau HTTPS raws tu qauv. Xyuas kom tseeb tias hais tias cov laus nplooj ntawv kuj muaj ib tug ruaj ntseg kev twb kev txuas. Tom qab hloov qhov chaw ntawm kev mus ua ib tug redirect thiab hloov koj robots.txt cov ntaub ntawv.

Yuav tsum tsis muaj ib lo lus nug tshwm sim yuav ua li cas ua https kev twb kev txuas rau ntawm qhov chaw. Nyob rau feem ntau web fwjchim luj kawg nkaus kom muaj xws li kev tiv thaiv tsoom fwv yuav tsum tsuas sau ntawv mus rau kev pab txhawb nqa. Lawv yuav xaiv ib tug tshwj xeeb, thiab nws yuav ua qhov chaw ntawd.