SSL vs
Kev sib txuas lus hauv tes hauj lwm lossis hauv internet tuaj yeem ua rau tsis muaj kev nyab xeeb yog tias tsis muaj kev ntsuas kev nyab xeeb zoo. Qhov no tuaj yeem yog qhov tseem ceeb rau cov ntawv thov xws li kev them nyiaj hauv lub vev xaib, ua rau poob ntau lab daus las rau cov neeg siv khoom thiab kev lag luam. Qhov no yog qhov chaw SSL thiab HTTPS tuaj txog. HTTPS yog kev sib txuas ntawm HTTP thiab SSL uas tuaj yeem lees paub cov kev nyab xeeb ntawm kev sib txuas tsis ruaj ntseg.
SSL yog dab tsi?
SSL (Secure Socket Layer) yog cov txheej txheem cryptographic uas siv los muab kev nyab xeeb rau kev sib txuas lus hauv internet. SSL siv asymmetric cryptography los khaws kev ceev ntiag tug thiab cov lus pov thawj cov lej kom ntseeg tau tias muaj kev ntseeg siab rau txhua qhov kev sib txuas hauv network saum txheej thauj. SSL yog dav siv rau kev tshawb nrhiav hauv web, email, faxing hauv internet, IM (s instant messages) thiab VoIP (Voce-over-IP). SSL tau tsim los ntawm Netscape Corporation thiab nws tau ua tiav los ntawm TLS (Transport Layer Security). SSL 2.0 tau tso tawm xyoo 1995 (version 1.0 yeej tsis tau tso tawm rau pej xeem), thiab version 3.0 (tso tawm ib lub xyoo txheej) hloov lub version 2.0 (uas muaj ntau yam kev ruaj ntseg tsis zoo). Tom qab ntawd, TLS tau qhia ua SSL 3.1. Tam sim no version yog SSL 3.3, uas feem ntau pom tias yog TLS 1.2. SSL encapsulates daim ntawv thov txheej raws tu qauv zoo li HTTP, FTP thiab SMTP los ntawm kev ua raws li txheej thauj. Kev lig kev cai nws tau raug siv nrog TCP (Kev Tswj Kev Sib Txuas Lus) thiab kom tsawg dua nrog UDP (User Datagram Protocol). SSL yog siv nrog HTTP kom tau txais HTTPS, uas siv cov ntawv pov thawj tseem ceeb rau pej xeem los txheeb xyuas qhov kawg rau cov ntawv thov xws li e-lag luam.
HTTPS yog dab tsi?
HTTPS (HTTP Ruaj Ntseg) yog cov txheej txheem tsim los ntawm kev sib txuas HTTP (HyeperText Transfer Protocol) thiab SSL / TLS raws tu qauv. HTTPS muab kev sib txuas lus ruaj ntseg los ntawm kev encryption thiab txheeb xyuas cov ntsiab lus kawg ntawm kev sib txuas ua rau nws zoo tagnrho rau cov ntawv thov xws li kev them nyiaj hloov pauv ntawm WWW (World Wide Web) lossis kev hloov pauv hauv kev lag luam. Yeej, HTTPS tuaj yeem tsim kev sib txuas ruaj ntseg los ntawm kev sib txuas tsis ruaj ntseg. Yog tias cov kev siv cipher suites tsim nyog thiab cov ntawv pov thawj neeg rau zaub mov tau ntseeg siab, ces cov HTTPS kev ruaj ntseg channel no yuav tiv thaiv cov eavesdroppers thiab Man-in-the-Middle attacks. Tab sis, txawm tias HTTPS siv, tus neeg siv tuaj yeem lav tias cov channel muaj kev nyab xeeb nkaus xwb yog tias tag nrho cov xwm txheej hauv qab no txaus siab: browser siv HTTPS kom raug nrog CAs (Certificate Authority), CAs tsuas yog vouch rau qhov chaw raug cai, daim ntawv pov thawj muab los ntawm lub qhov chaw siv tau, lub vev xaib raug txheeb xyuas los ntawm daim ntawv pov thawj thiab thaum kawg, nruab nrab hops tau ntseeg tau. Txhua tus browsers niaj hnub ceeb toom cov neeg siv yog tias lawv tau txais daim ntawv pov thawj tsis raug los ntawm lub vev xaib. Tau kawg, tus neeg siv tau txais kev xaiv txuas ntxiv ntawm nws tus kheej txaus ntshai.
Qhov txawv ntawm SSL thiab HTTPS yog dab tsi?
Qhov sib txawv tseem ceeb ntawm SSL thiab HTTPS yog tias SSL yog cov txheej txheem cryptographic, thaum HTTPS yog raws tu qauv tsim los ua ke HTTP thiab SSL. Tab sis, qee zaum, HTTPS tsis raug txheeb xyuas raws li txoj cai ntawm ib tus se, tab sis lub tshuab siv tsuas yog siv HTTP hla kev sib txuas ntawm SSL. Hauv lwm lo lus, HTTPS siv SSL los tsim kev sib txuas HTTP ruaj ntseg. Vim yog kev encryption muab los ntawm SSL, HTTPS muaj peev xwm tiv thaiv eavesdropping thiab txiv neej-hauv-qhov nruab nrab tawm tsam.
