HTTP 和 HTTPS 协议
我的问题与超文本协议有关。
在用户输入机密信息或进行注册过程的区域中，我需要什么才能使用 HTTPS 而不是 HTTP？
谢谢。
my question is related to hypertext protocol.
what is the requirements from my side to be able to use HTTPS instead of HTTP in the areas where a user will enter confident information or when there is a registration process.
Thank you.
如果你对这篇内容有疑问，欢迎到本站社区发帖提问 参与讨论，获取更多帮助，或者扫码二维码加入 Web 技术交流群。
绑定邮箱获取回复消息
由于您还没有绑定你的真实邮箱，如果其他用户或者作者回复了您的评论，将不能在第一时间通知您！
发布评论
评论（2）
首先，您需要配置您的网络服务器以使用 https；这又要求您拥有服务器证书。您可以创建自己的服务器证书，也可以从证书颁发机构之一购买一份。后者将使浏览器相信您的网站是真实的（而对于您自己创建的网站，从浏览器的角度来看，可能会发生中间人或网络钓鱼攻击）。
如何精确配置你的服务器应该在 serverfault 上讨论。
Primarily, you need to configure your webserver to use https; this in turn requires that you have a server certificate. You can either create your own server certificate, or you can buy one from one of the Certificate Authorities. The latter will cause browsers to trust that your site is genuine (whereas in the case of one that you created yourself, a man-in-the-middle or phishing attack might happen from the viewpoint of the browser).
How to configure your server precisely should be discussed on serverfault.
您需要一个证书（您可以购买一个，该证书通常由浏览器识别，或创建一个自签名证书，这将在浏览器上触发警告）以及能够运行 HTTPS 的服务器。支持 HTTPS 的服务器允许您定义哪些页面通过 HTTP 提供服务，哪些页面通过 HTTPS 提供服务。
顺便说一句，HTTPS 不是身份验证，它只是对通信进行加密，以防止窃听者读取服务器和客户端之间发送的内容。
您可以通过 HTTPS 使用任何身份验证方法，但您需要提供它（无论是 HTTP 身份验证还是应用程序中的其他方法）。
鉴于您的问题模棱两可，没有什么可说的。
You need a certificate (you can buy one, which are usually identified by browsers, or create a self-signed certificate, which will trigger a warning on browsers) and a server able to run HTTPS. HTTPS capable servers allow you to define which pages are served via HTTP and which via HTTPS.
HTTPS IS NOT authentication, by the way, it only encrypts communications to prevent eavesdroppers reading what's being sent between the server and client.
You can use any authentication method over HTTPS, but you need to provide it (be it HTTP Auth or something in your application.)
There isn't much more to say given your ambiguous question.