About Web security, 99% of websites care about this.

About Web security, 99% of websites care about this.

Web security is a problem that cannot be emphasized. We find that many websites in China do not implement full-site https, and there are few practices for other security policies, the purpose of this article is not to discuss security and attack details, but to think about and pay attention to security from a policy perspective.

1. Data Channel Security
The network connections under the http protocol are based on plain text, and information may be leaked and tampered. Even users do not know whether the communication peer is the server they want to connect. Therefore, information channel Security has the following two goals:

Identity Authentication

No data leakage or tampering

Fortunately, https solves the above problems (