什么是 SSL？它与 HTTPS 有何关系？
什么是 SSL？它与 HTTPS 有何关系？
What is SSL and how does it relate to HTTPS?
如果你对这篇内容有疑问，欢迎到本站社区发帖提问 参与讨论，获取更多帮助，或者扫码二维码加入 Web 技术交流群。
绑定邮箱获取回复消息
由于您还没有绑定你的真实邮箱，如果其他用户或者作者回复了您的评论，将不能在第一时间通知您！
什么是 SSL？它与 HTTPS 有何关系？
What is SSL and how does it relate to HTTPS?
由于您还没有绑定你的真实邮箱，如果其他用户或者作者回复了您的评论，将不能在第一时间通知您！
接受 或继续使用网站，即表示您同意使用 Cookies 和您的相关数据。
发布评论
评论（9）
SSL 是安全套接字层，是一种加密网络流量的加密协议。 SSL 的最新版本是版本 3，它修复了 SSLv2 中的一些已知问题。 HTTPS 是基于 SSL 的 HTTP...或基于 TLS 的 HTTP。
TLS（传输层安全）是 SSLv3 的后继者，并且将在很大程度上取代 SSLv3 作为默认的 HTTPS 协议在网络浏览器和服务器中。
附带说明一下，HTTPS 通常侦听端口 443，而不是端口 80。
SSL is the secure socket layer, a cryptographic protocol to encrypt network traffic. The most recent version of SSL is version 3, which fixed some known issues in SSLv2. HTTPS is HTTP over SSL... or HTTP over TLS.
TLS (Transport Layer Security) is the successor to SSLv3 and is largely replacing SSLv3 as the default HTTPS protocol in web browsers and servers.
As a side note, HTTPS usually listens on port 443, rather than port 80.
HTTPS 只是基于 SSL 的 HTTP。 或者安全套接字层上的超文本传输协议。
SSL 是一种加密的通信通道。 HTTP 是通过网络传输网页和其他网页内容的方式。
HTTPS is just HTTP over SSL. Or Hypertext Transfer Protocol over Secure Socket Layer.
SSL is an encrypted channel for communication. HTTP is the way to transfer web pages and other web content across the network.
HTTPS： (RFC 2818) 用于提供安全通信。 它是 TCP/IP 堆栈上的应用层协议（类似于 HTTP）。
SSL：它是 TCP/IP 堆栈中应用层和传输层之间的一层。 它提到了遵守 PKCS（公钥加密标准）的客户端-服务器身份验证（通过握手和基于证书的身份验证完成）； 一旦建立，就通过安全通道进行消息通信（某些商定的加密标准用于在发送方和接收方强制执行适当的加密/解密）。 总之，除非建立经过身份验证的加密通道，否则不会发送应用程序数据。
SSL 和 HTTPS 之间的关系：HTTPS 是基于 SSL 协议的安全 HTTP 通信（正如他们所说，HTTP over SSL）。 一般来说，所有敏感信息（如密码、财务详细信息等）都通过此传输方式发送。 常见示例：您的 Gmail 登录是通过 HTTPS 通道完成的。
其他：几乎所有标准浏览器都支持 https。 您可以看到他们默认拥有的证书。 SSLV2、SSLV3 和 TLS 是受支持的标准（据我记得）。
HTTPS: (RFC 2818) is for providing secure communication. It is an application layer protocol on TCP/IP stack (similar to HTTP).
SSL: It is a layer in TCP/IP Stack between Application layer and Transport layer. It mentions client-server authentication (it is done through a handshake and certificate based authenticvation) adhering to PKCS (public key crypto standards); communication of messages over the secure channel once it was established (certain agreed crypto standards are used to enforce proper encryption/decryption at sending and receiving side). In summary, no application data are sent unless an authenticated, encrypted channel is established.
Relation b/w SSL and HTTPS: HTTPS is secure HTTP communication based on SSL protocol (HTTP over SSL, as they say). Generally all sensitive info (like passwords, financial details, etc.) are sent over this transport. Common example: your gmail login is done through HTTPS channel.
Miscellaneous: Almost all standard browsers support https. You can see the certificates they possess by default. SSLV2, SSLV3 and TLS are the supported standards (as far as I recollect).
HTTPS = HTTP over SSL
SSL 是 TCP 之上的一层，允许安全、加密的数据交换。
HTTP 通常在 TCP 上运行，因此未加密。 HTTPS 是 HTTP 协议通过 SSL 运行而不是直接通过 TCP 运行，因此交换的数据是加密的。
HTTPS = HTTP over SSL
SSL is a layer over TCP that allows for secure, encrypted exchange of data.
HTTP normally runs over TCP and is therefore not encrypted. HTTPS is where the HTTP protocol is run over SSL rather than directly over TCP and therefore the data exchanged is encrypted.
了解更多：SSL 证书终极指南（2017 年更新）< /a>
Read More: The Ultimate Guide to SSL Certificates (2017 Update)
SSL 是一种用于在应用程序级别安全隧道或加密网络连接的协议。
HTTPS 只是通过 SSL 使用的 HTTP。
SSL is a protocol for secure tunneling or encrypting network connections at the application level.
HTTPS is just HTTP used over SSL.
SSL 和 HTTPS 用于加密、安全的网络通信。 网络上有大量解释这些协议的资源。
以下是一个资源的链接：http://www.ourshop.com/resources/ssl。 html
SSL and HTTPS are used for encrypted, secure network communications. There are plenty of resources on the web that explain the protocols.
Here is a link to one resource: http://www.ourshop.com/resources/ssl.html
SSL 安全（安全套接字层）是一种用于保护在两个系统（即服务器和客户端）或两个不同服务器之间传输的数据的技术。 它使用加密算法来扰乱传输中的数据，防止黑客在通过连接发送数据时读取数据。
SSL Security(Secure Sockets Layer) is a technology which is used to secure data, transferred between two system i.e Server and client or between two different server. It uses encryption algorithms to scramble data in transit, preventing hackers from reading it as it is sent over the connection.
让我把它归结为简单的术语：
这是一个位于服务器上的简单文件
SSL 证书由高层颁发（例如 Amazon、goDaddy）
网站，以使其更加安全并向用户和浏览器保证我们受到保护。
为什么网站需要这些证书？
Let me boil it to simple terms :
it's a simple file lies on the server
SSL certificate is given by high authorities (eg. Amazon , goDaddy)
to the websites for making it more secure and to assure user and browser that we are protected.
Why do the websites need these certificates?