sni browser support

HTTPS protocols: TLS, SSL, SNI, ALPN, PNP, snialpn HTTPS is now widely used. It brings security while introducing more complicated concepts to the Web. This includes a series of network protocols that have never been seen before. Now, based on the

The early SSLv2 was designed according to the classic PKI (public key Infrastructure), which by default assumed that a server (or an IP) would only provide a service, so at the time of the SSL handshake, the server side could be sure which

How to Set HTTPS policies for old browsers A few days ago, a friend asked me: we all said we recommend using the Qualys SSL Labs tool to test SSL security. Why are some of the most powerful Security manufacturers having low scores? I think this

Our load-balancing architecture is this:Request, network---LVS cluster, Nginx cluster, APPLVS use Fullnat mode, each nginx machine has only one IP (intranet IP), LVS is also the traffic to this IP. If Nginx wants to use HTTPS for multiple domain

How to Set HTTPS policies for old browsers A few days ago, a friend asked me: we all said we recommend using the Qualys SSL Labs tool to test SSL security. Why are some of the most powerful Security manufacturers having low scores? I think this

Program Introductionthe software involved BIND: A popular domain name resolution server, we can set which domain names need to take the encrypted line. Stunnel: The TCP protocol is encrypted with TLS, that is, an encrypted line is

Topic One: Why is HTTPS safe1. Why is HTTP not secure?The HTTP protocol belongs to the plaintext transmission protocol, the interaction process and data transmission are not encrypted, the communication parties have not carried out any

In recent years, I have written many articles about HTTPS and HTTP/2, covering all aspects of certificate applications, Nginx compilation and configuration, and performance optimization. In the comments of these articles, a lot of readers raised a

By analyzing the details of the TLS handshake process, we find that HTTPS increases multiple RTT network transfer times over HTTP, increasing the service-side overhead and slowing down the client response time. Therefore, performance optimization is

nginx enable HTTP2 feature View the current Nginx compilation options #./nginx-v nginx version:nginx/1.9.15 built by GCC 5.4.0 20160609 (Ubuntu 5.4.0-6ubuntu1~16.04.4) built With OpenSSL 1.0.2g 1 April TLS SNI support enabled configure arguments: