Shulou(Shulou.com)06/01 Report--

According to one theory, in order to protect the privacy of users:

Why use HTTPS: more and more people are concerned about privacy, and the privacy and security of Internet users will only be paid more and more attention. Foreign countries have already taken the lead in this respect, and HTTPS is the trend of the future. In China, where hijacking is rampant and privacy theft is rampant, HTTPS will be a strong line of defense in front of users. In any case, the site-wide HTTPS is valuable for users and the company itself.

Why should be used throughout the site: the reason is very simple, browsers are very sensitive to HTTP resources under HTTPS, especially Chrome and IE8, there will be "unsafe factors" alarm. This is also in line with security requirements. In addition, for the sake of page performance, the mixed use of HTTPS and HTTP has a great impact on the performance of resource loading. As for why other large domestic sites do not use HTTPS, they are probably still weighing the cost and hesitation. after all, it is not easy to upgrade HTTPS in a short period of time.

Personal privacy is indeed a problem, but service providers like Baidu, which sells users' privacy crazily for profit, are suddenly talking about protecting users' privacy for a somewhat far-fetched reason.

One way of saying is to prevent operators from hijacking:

Since the second half of last year, Baidu has been hijacked, redirected and added advertising codes by local operators more and more seriously, seriously affecting revenue and market share, but in the name of privacy to enable https, the fundamental purpose is to prevent being intercepted and tampered with.

As domestic Internet users generally use the default DNS server, that is, the DNS service of telecom operators, some operators do not pay attention to integrity and business ethics, and for the sake of benefit, they will tamper with the DNS conversion, and without the consent of users, they will go to websites such as 114,xxx information port, interconnected star sky, or engraft commercial advertisements on specific websites, seriously damaging the legitimate rights and interests of users and webmasters. How much will telecom operators profit from hijacking advertisements? According to the analysis of people in the industry, according to the market price of 6 yuan / CPM (CPM advertising, the cost per thousand people, refers to the fee payable by advertising 1000 times), it is conservative at more than tens of thousands of yuan a day. Users and webmasters are obviously used, users contribute eyeballs, and the site contributes traffic.

The second argument should be closer to the truth.

How to use https on the website

General Web servers support Https, as long as there is a relevant SSL certificate. (SSL certificates can now be obtained free of charge, such as through Aliyun.) In the case of IIS, the higher version of IIS supports multiple domain names Https, but the lower version of IIS, such as IIS6, only supports IP-level SSL certificates, that is, if you have three websites on one server, but it can only provide Https services to one of the domain names, and can only use one SSL certificate. If you encounter this situation, you can also use some three-party tools to get multi-domain Https support. For example, you can use ShareWAF (http://www.sharewaf.com/), although this is a WAF, but it can support multi-domain Https access. In addition, Nginx (http://nginx.org/) can also achieve multi-domain name https access.

Welcome to subscribe "Shulou Technology Information " to get latest news, interesting things and hot topics in the IT industry, and controls the hottest and latest Internet news, technology news and IT industry trends.