Siv HTTPS rau Storefronts, Ecommerce Web Sites, thiab Ntau Ntxiv
Kev ruaj ntseg hauv Internet yog qhov tseem ceeb, thiab feem ntau tsis pom zoo, qhov ntawm lub website qhov kev vam meej.
Yog tias koj tab tom khiav lag luam hauv online los yog hauv Eccmerce lub vev xaib , koj yuav xav kom cov neeg tuaj yeem muab cov ntaub ntawv uas lawv muab rau koj rau ntawm qhov chaw ntawd, nrog rau lawv cov credit card naj npawb, yog muab tuav pov hwm. Lub website kev ruaj ntseg tsis yog rau cov khw muag khoom hauv online xwb. Thaum lub sij hawm Ecommerce chaw thiab lwm tus neeg uas kam nrog cov ntaub ntawv (cov credit card, cov ntawv qhia kev ruaj ntseg, cov ntaub ntawv nyiaj txiag, thiab lwm tus) yog cov neeg sib tw khiav mus rau kev sib txuas lus, qhov tseeb yog tias TAG NRHO cov websites tau txais txiaj ntsim los ntawm kev nyab xeeb.
Kom muaj kev ruaj ntseg ntawm qhov chaw sib kis (ob qho tib si los ntawm lub site rau cov qhua thiab cov qhua rov qab rau koj lub web server), qhov chaw ntawd yuav tsum siv HTTPS - los sis HyperText Hloov Pej Xeem nrog Cov Luag Cov Txheej Txheem, lossis SSL. HTTPS yog ib txoj haujlwm los hloov cov ntaub ntawv encrypted hauv Web. Thaum twg ib tug neeg xa koj cov ntaub ntawv tawm txhua yam, muaj lwm txoj hau kev, HTTPS yuav tswj kom ruaj ntseg.
Nws muaj ob feem sib txawv ntawm HTTPS thiab HTTP kev twb kev txuas ua haujlwm:
- HTTPS txuas ntawm chaw nres nkoj 443, hos HTTP yog nyob rau hauv chaw nres nkoj 80
- HTTPS encrypts cov ntaub ntawv xa thiab tau txais nrog SSL, hos HTTP xa nws tag nrho raws li cov ntawv nyeem dawb
Feem ntau ntawm cov neeg muas zaub hauv khw muag khoom paub tias lawv yuav tsum tau saib rau "https" hauv qhov URL thiab nrhiav kev tawm lub cim cia hauv lawv qhov browser thaum lawv ua lag luam. Yog tias koj lub khw muag khoom tsis siv HTTPS, koj yuav tsis tau txais cov qhua tuaj yeem thiab koj tseem yuav qhib tau koj tus kheej thiab koj lub lag luam li ntiag tug yog tias koj tsis muaj kev ruaj ntseg dabtsi ntawm lwm tus neeg cov ntaub ntawv. Qhov no yog vim li cas zoo nkauj ntau hauv online khw niaj hnub no siv HTTPS thiab SSL - tab sis raws li peb tau cia li tau teev, siv lub website tsis muaj kev cuam tshuam tsuas yog rau cov chaw hauv Ecommerce lawm.
Hnub no lub vas sab, txhua lub tsev kawm ntawv yuav tau txais txiaj ntsim los ntawm kev siv SSL. Google tau pom zoo rau qhov no rau cov tsev kawm ntawv hnub no raws li ib txoj kev tshawb xyuas tias cov ntaub ntawv ntawm lub tsev kawm ntawv yog, qhov tseeb, los ntawm lub tuam txhab thiab tsis yog ib tus neeg sim ua qhov chaw tsis muaj teeb meem. Xws li, Google yog tam sim no muaj txiaj ntsig cov chaw uas siv lub SSL, uas yog lwm qhov laj thawj, nyob saum kev ruaj ntseg, ntxiv qhov no rau koj lub vev xaib.
Xa cov ntaub ntawv Encrypted
Raws li tau hais los saum no, HTTP xa cov ntaub ntawv khaws hauv Internet hauv cov ntawv nyeem. Qhov no txhais tau hais tias yog tias koj muaj ib daim ntawv thov rau tus nab npawb credit card, tus credit card naj npawb tuaj yeem raug cuam tshuam los ntawm txhua tus neeg uas muaj pob khoom sniffer. Txij li muaj ntau ntau dawb sniffer software cuab yeej muaj, qhov no yuav ua tau rau leej twg txhua yam nrog tsawg heev kev kawm los yog kev cob qhia. Los ntawm kev sau cov ntaub ntawv tshaj ib HTTP (tsis yog HTTPS) kev sib txuas, koj tab tom muaj kev pheej hmoo tias cov ntaub ntawv no yuav raug cuam tshuam thiab, vim nws tsis yog encrypted, siv los ntawm tus tub sab.
Yam Koj Yuav Tsum Tau Tshaj Lij Rau Cov Vaj Tse
Tsuas muaj ob peb yam koj xav tau thiaj li muaj kev ruaj ntseg cov nplooj ntawv hauv koj lub vev xaib :
- Ib tug neeg siv Web site xws li Apache nrog mod_ssl uas txhawb SSL encryption
- Ib lub cim IP chaw - qhov no yog qhov cov kws muab ntawv pov thawj zov me nyuam siv los kho qhov daim ntawv pov thawj ruaj ntseg
- Ib daim SSL Certificate los ntawm tus kws kho mob SSL daim ntawv pov thawj
Yog tias koj tsis paub meej txog thawj ob yam khoom, koj yuav tsum hu rau koj tus kws kho mob qhov Web site. Lawv yuav tuaj yeem qhia koj yog tias koj tuaj yeem siv HTTPS hauv koj lub vev xaib. Muaj qee zaum, yog tias koj siv lub tsev lag luam uas tsis tshua muaj siab, koj yuav tau hloov cov tuam txhab hosting lossis upgrade cov kev pabcuam koj siv tam sim no thiaj li tau txais kev tiv thaiv SSL koj xav tau. Yog tias qhov no yog qhov teeb meem - hloov qhov kev hloov! Cov txiaj ntsig ntawm kev siv SSL yog tsim nyog ntxiv cov nuj nqis ntxiv ntawm kev ua kom muaj chaw zoo tuaj!
Thaum Koj & # 39; thiab Koj Cov Ntawv Tso Cai HTTPS
Thaum koj tau muas SSL ib daim ntawv pov thawj los ntawm ib tus kws kho mob uas tau txais kev pab, koj tus neeg saib xyuas yuav tsum teeb tsa daim ntawv pov thawj rau hauv koj lub web server kom txhua zaus tau txais cov nplooj ntawv hauv https: // protocol, nws hits tus neeg saib xyuas kev ruaj ntseg . Thaum pib lawm, koj tuaj yeem pib tsim koj cov nplooj ntawv Web uas yuav tsum muaj kev ruaj ntseg. Cov nplooj ntawv no yuav raug txhim tsa tib yam li lwm cov nplooj ntawv, koj tsuas xav tau kom koj txuas rau https siv http yog tias koj siv cov kev txuas tsis txuas ntawm koj lub vev xaib rau lwm cov nplooj ntawv.
Yog tias koj twb muaj ib lub vev xaib uas tau ua rau HTTP thiab koj tau hloov tam sim rau HTTPS, koj yuav tsum ua txhua yam thiab. Tsuas yog xyuas cov kev sib txuas kom paub tseeb tias txhua txoj kev tsis muaj leej twg tshiab, xws li cov duab mus rau cov ntaub ntawv duab lossis lwm cov kev pabcuam sab nraud xws li CSS nplooj ntawv, JS cov ntaub ntawv, lossis lwm yam ntaub ntawv.
Nov yog qee cov tswv yim ntxiv rau kev siv HTTPS:
- Taw tes rau tag nrho Web cov ntaub ntawv ntawm https: // server. Thaum twg koj txuas mus rau Web cov ntawv hauv koj lub vev xaib, mus rau hauv qhov cwj pwm ntawm kev txuas rau lawv nrog tag nrho cov neeg rau zaub mov URL nrog rau https: // lub npe. Qhov no yuav raug kho tias lawv yeej ruaj khov.
- Siv cov kev txheeb ze rau cov duab rau cov nplooj ntawv ruaj khov. Yog hais tias koj siv tag nrho txoj kev (http: // www ...) rau koj cov dluab, thiab cov dluab tsis nyob rau ntawm cov neeg siv khoom ruaj ntseg, koj cov neeg muas zaub yuav tau txais cov lus yuam kev uas hais tias tej yam xws li: "Insecure data found. Qhov no tuaj yeem ua kom poob siab, thiab ntau tus neeg yuav nres qhov kev yuav khoom thaum lawv pom tias. Yog tias koj siv cov kev txheeb ze uas txheeb ze, koj cov duab yuav tsum muab los ntawm tib tus neeg tau txais kev ruaj ntseg zoo tib yam li ntawm phab ntawv.
Thawj tsab xov xwm los ntawm Jennifer Krynin. Edited by Jeremy Girard rau 9/7/17