C # Programming Summary (11) Digital certificate

Here to describe the concept of digital certificate, the role, working principles and specific applications. Hope to give you a clear understanding.

First, the concept

Digital certificate is a serial number of identity information of all parties in Internet communication, which provides a way to authenticate the identity of the communication entity on the Internet, which is similar to the driver's driving licence or the identity card in daily life. It is issued by an authority-----CA, also known as the Certificate Authority (certificate Authority) center, which people can use to identify each other on the Internet. A digital certificate is a digital ID that provides user authentication on the Internet, a file that contains public key owner information and a public key, digitally signed by a certificate authority. The simplest certificate contains a digital signature that exposes the key, name, and certificate Authorization center.

Ii. threats from the internet

With the gradual promotion of the Internet, online shopping, internet banking, E-commerce, e-government and so on are increasingly in-depth, the threat from the network more and more, the importance of network security becomes more important.

1. Eavesdropping

Credit card number stolen, personal security information stolen

The network transmission is on the public channel, especially the HTTP transmission mostly in the clear text transmission, the hacker carries on the eavesdropping, obtains the sensitive information.

2, camouflage

Fake real servers, fake real users

This can be often encountered in daily life, for example, given a similar domain name or IP, through this access to direct information to the fake server, at this time, our username password may be stolen,

such as ICBC's website: www.icbc.com.cn, fake server address: www.1cbc.com.cn, and the page content style is very similar, the user login, the credit card number password will be stolen. This means that outlaws are easy to succeed. Remember before someone posing as a QQ website, by pop-up with the link of the small ads, jump to and QQ landing screen similar to the page, to steal QQ password.