Shulou(Shulou.com)06/01 Report--

This article mainly introduces the relevant knowledge of "Why Mini Program uses HTTPS links". The editor shows you the operation process through an actual case. The method of operation is simple, fast and practical. I hope this "Why Mini Program uses HTTPS links" article can help you solve the problem.

1. HTTPS

HTTPS is the secure version of HTTP. The security protocol formed by adding SSL certificate (server certificate) on the basis of HTTP can not only establish information encryption to ensure the security of data transmission, but also authenticate the authenticity of the server and prevent "phishing" websites. Every WeChat Mini Programs needs to set up a legal domain name for communication and communicate through the HTTPS request. If the domain name and protocol are not satisfied, Mini Program will not be able to use it.

II. HTTPS ensures the safe use of Mini Program

In the Internet age, we all download programs to use, but some programs are implanted in Trojans or backdoors, which will be poisoned once installed. Mini Program is based on H5 web technology and can be used online without installation, but there are other security threats. Network communication has always been transmitted through the HTTP protocol, is not encrypted, there is a very high risk, that is to say, unencrypted information, in the process of transmission through HTTP, is easy to be intercepted by third parties and divulge personal important information. More importantly, the HTTP protocol cannot verify the authenticity of the program server, even if it spreads fake "phishing" Mini Program in the WeChat group.

Choose the appropriate SSL certificate

HTTPS = HTTP+ SSL certificate, so how to choose a suitable SSL certificate?

(1) Certificate type

At present, there are three types of SSL certificates: DV domain name, OV organization, and EV enhancement:

1. DV certificate does not have identity authentication function, so it is not recommended.

2. EV certificate has the highest security level, which can display green address bar and authentication name, but the price is relatively high. (Mini Program does not display the address bar, so the advantages of EV certificate can not be fully reflected)

3. OV certificate is a kind of SSL certificate which is suitable for developers because of its perfect function and low cost. (if you have more than one Mini Program, it is time-consuming and expensive to buy one certificate after another. Choose a multi-domain OV certificate and use one certificate to protect multiple Mini Program communication domain names.)

(2) Certificate support

The certificate should support all browsers and operating systems, especially the two currently in use in the mobile phone market, Android and IOS.

(3) Certificate issuing authority

SSL certificates are issued by a third-party digital certificate authority (CA), so you should pay attention to:

1. First understand the risk control ability of CA through the media and other channels. If the risk control level of CA is not high, it is possible to issue certificates incorrectly and be punished by browsers and operating system vendors.

2. To apply for SSL certificate, developers need to submit identity documents for CA review.

3. SSL certificates are charged according to quantity and number of years. (you can pay more attention to each CA marketing campaign and get the certificate at a low cost.)

This is the end of the content about "Why Mini Program uses HTTPS links". Thank you for reading. If you want to know more about the industry, you can follow the industry information channel. The editor will update different knowledge points for you every day.

Welcome to subscribe "Shulou Technology Information " to get latest news, interesting things and hot topics in the IT industry, and controls the hottest and latest Internet news, technology news and IT industry trends.