eff https everywhere

Mozilla, Cisco, Akamai, Identrust, eff, and University of Michigan researchers announced the Let's Encrypt CA project, which plans to provide free SSL certificates to the Web site, accelerating the transition of the Web from HTTP to https. Let's Encrypt CA project plans to automatically release and manage free certificates from the summer of 2015 to any Web site that requires encryption certificates.The big

With the public's increasing attention to network security, a variety of network security protection methods emerge. HTTPS everywhere as an effective means to improve the security of HTTPS, the security and practicality has been strengthened again recently.Although HTTPS can effectively improve the security of users to browse the Web, but there are still problems

HTTPS practices for large websites (II)-Impact of HTTPS on performance and https practicesPreface HTTPSIt plays a critical role in protecting user privacy and preventing traffic hijacking. However, HTTPS also reduces user access speeds and increases the computing resource consumption of website servers. This article de

First, what is HTTPSBefore talking about HTTPS, say what is Http,http is a protocol that we use when browsing the web. The data transmitted by the HTTP protocol is unencrypted, which is plaintext, so it is very insecure to use the HTTP protocol to transmit private information. To ensure that these private data can be encrypted, Netscape designed the SSL (Secure Sockets Layer) protocol to encrypt the data transmitted by the HTTP protocol, which led to

1.nginx + HTTPS + TomcatNginx Configuration:server {Listen 443;server_name www.example.com; #域名SSL on;#index index.html index.htm;Ssl_certificate Cert/1523584742511.pem; #证书Ssl_certificate_key Cert/1523584732510.key; #证书Ssl_session_timeout 5m;Ssl_ciphers ecdhe-rsa-aes128-gcm-sha256:ecdhe:ecdh:aes:high:! null:!anull:! md5:! Adh:! RC4;Ssl_protocols TLSv1 TLSv1.1 TLSv1.2;Ssl_prefer_server_ciphers on;Location/{Root "C:/Program Files/apache-tomcat-8.5.30/w

Article Source: http://blog.csdn.net/chow__zh/article/details/8843594 In the command Prompt window, go to the Tomcat directory and execute the following command:Keytool-genkey-alias tomcat-keyalg rsa-keypass changeit-storepass changeit-keystore server.keystore-validity 3600Generate the Server.keystore certificate file from the above stepsOpen the comment that servlet.xml a bitPort= "8443" maxhttpheadersize= "8192"maxthreads= "minsparethreads=" maxsparethreads= "75"Enablelookups= "false" disableu

1, first in the httpd.conf inside modify several placesFind #LoadModule ssl_module modules/mod_ssl.so remove the front #Include conf/vhosts.conf add a line below this line include conf/vhosts_ssl.conf and then go to conf folder inside Create vhosts_ssl.conf2. Write in vhosts_ssl.confListen 443Sslstrictsnivhostcheck offSslciphersuite aesgcm:all:! Dh:! export:! rc4:+high:! medium:! Low:!anull:!enullSslprotocol All-sslv2-sslv3documentroot "D:\phpStudy\zhifu"ServerName www.ceshi.comServeralias ceshi

　　What is https: 　　HTTPS (Secure hypertext Transfer Protocol) Secure Hypertext Transfer Protocol It is a secure communication channel that is based on HTTP development and is used to exchange information between client computers and servers. It uses Secure Sockets Layer (SSL) for information exchange, in short, it is a secure version of HTTP. It is developed by Netscape and built into its browser to comp

This article is not original, original address: https://www.cnblogs.com/lichunting/p/9274422.htmlA CA Certificate Request(a). New STARTSSL Registered Account1. STARTSSL official website Official website: https://www.startssl.com/ 2. After entering the STARTSSL, click on the registered account directly and then go to the email registration page.3. Click Send verification code, go to the followi

Once the domain name has been added to the certificate, we generally want to redirect all requests to a URL, so that when the search engine in the crawl can be centralized in an address, in favor of SEOSuch as:We want the following three domains to be redirected to Https://www.xiaoben707.com Http://www.xiaoben707.com Http://xiaoben707.com Https://xiaoben707.com We need to do the follow

new local test site and bind the certificate we just created. Open the Hosts file to create a name for the site (for example, Http://webjoeyssl so this webjoeyssl is the name of the site we need to create, I use hosts to resolve to local) C:\Windows\System32\drivers\etc Binding directories in IIS, binding HTTP and HTTPS At the time of addition, binding type, first select the type of HTTP, although there is HTTP