src 使用 HTTPS 的 SWF 安全吗？
这是一个场景：
我将 form.swf 嵌入 http://somesite.com/page.html。 SWF 从 https://example.com/form.swf 加载并提交到 https://example.com/secureform.php。
那么，到服务器的传输安全吗？
Here is a scenario:
I am embedding form.swf in http://somesite.com/page.html. The SWF is loaded from https://example.com/form.swf and submits to https://example.com/secureform.php.
So, is the transmission to the server secure?
如果你对这篇内容有疑问，欢迎到本站社区发帖提问 参与讨论，获取更多帮助，或者扫码二维码加入 Web 技术交流群。
绑定邮箱获取回复消息
由于您还没有绑定你的真实邮箱，如果其他用户或者作者回复了您的评论，将不能在第一时间通知您！
发布评论
评论（2）
这取决于您所说的安全是什么意思。 我想你是在问提交的数据是否安全，答案是如果你使用的是HTTPS，那就是。
SWF 上的 HTTPS 仅确保 Flash 对象不能在服务器和客户端之间被恶意修改。
It depends what you mean by secure. I think you are asking whether the submitted data is secure, and the answer is that if you are using HTTPS, it is.
HTTPS on the SWF ensures just that the Flash object cannot be maliciously modified between the server and the client.
是的，您必须详细说明“安全”的含义。 HTTPS 仅提供传输安全性（在大多数情况下）。 它不提供端点安全性。 也就是说，无法保证连接的任一端都是安全的，只能保证传输（大部分）安全。 如果任一端点遭到黑客攻击，则可能会通过更改 SSL 证书来发生多种攻击。 所以你不能相信客户的数据。 我现在假设您可以信任服务器数据（或者您真的有麻烦了:-)）。
Yeah, you are going to have to elaborate on what you mean by 'secure'. HTTPS just provides transport security (in most cases). It doesn't provide end-point security. That is to say, there is no way to guarantee that either end of the connection is secure, just that the transport is (mostly) secure. If either end point has been hacked many kinds of attacks can occur through altered SSL certificates. So you can't trust the client data. I will assume for now you can trust the server data (or you are in real trouble :-)).