始终重定向到 https 是否明智?
我正在开发一个项目,用户将转移他的用户名来激活互联网。 我希望始终将用户重定向到 https 版本,并使 http 版本也重定向到 https,因此只有 http 版本。 这是明智之举吗? 移动设备(支持 WiFi 的设备)是否存在问题
Thomas
I am working on a project where the user will transfer his username to activate the internet. I want to always redirect the user to the https version and make the http version redirect to the https aswell, so there is only an http version. Is this a smart move? Could there be problems with mobile devices (WiFi enabled devices)
Thomas
如果你对这篇内容有疑问,欢迎到本站社区发帖提问 参与讨论,获取更多帮助,或者扫码二维码加入 Web 技术交流群。
绑定邮箱获取回复消息
由于您还没有绑定你的真实邮箱,如果其他用户或者作者回复了您的评论,将不能在第一时间通知您!
发布评论
评论(2)
我不认为有很多设备不支持 ssl。 不过,有一些代理配置很愚蠢。
由于服务器负载的原因,大多数站点都不是“完整的 ssl”,ssl 可以使服务器很快崩溃。
I don't think that there are many devices which don't support ssl. There are some stupidly configured proxies, though.
Most site aren't "complete ssl" because of server load, ssl can bring a server to its knees really fast.
如果您要传输安全数据,那么重定向到 HTTPS 绝对是明智之举。 作为一名黑客,您会立即在网站中寻找最简单的漏洞。 在这种情况下,它将攻击 SSL 规则之外的任何设备。
If you're transmitting secure data, then it's definitely smart to to redirect to HTTPS. As a hacker, you'd immediately look for the easiest opening in a site. In this case, it would be attacking any devices that are excepted from the SSL rule.