HTTP 和帧。连接是否加密?
如果我有一个嵌入到 html 页面中的框架。页面通过http连接。我的问题是:
如果我的框架通过 https 连接,那么尽管容器页面通过 http 连接,但所有内容仍然是加密的?
更新:谢谢大家。所以它是加密的:)
If I have a frame embedded into a html page. The page connects through http. My question is:
If my frame connects through https is the connection and everything still encrypted despite the fact that the container page connects through http?
UPDATE: Thank you everyone. So it is encrypted :)
如果你对这篇内容有疑问,欢迎到本站社区发帖提问 参与讨论,获取更多帮助,或者扫码二维码加入 Web 技术交流群。
绑定邮箱获取回复消息
由于您还没有绑定你的真实邮箱,如果其他用户或者作者回复了您的评论,将不能在第一时间通知您!
发布评论
评论(3)
通过 https 传输的所有内容都是加密的。
如果您的 https 页面包含未加密的元素(仅 http),浏览器将向您发出警告,除非您关闭警告。
所以是的,您的框架将作为 https 加载,并且如果内容 url 是 https 则将被加密。
如果您想确定 - 安装一个 http 代理并检查通过该代理的流量。您将看到 http 请求的 html 和 https 的乱码消息。
Everything which is transfered through https is encrypted.
If your https page contains elements which are not encrypted (only http), the browser will warn you unless you have turned of the warning.
So yes, your frame will be loaded as https and will be encrypted if the content url is a https one.
If you want to be sure - install an http proxy and check the traffic through this proxy. You'll see html for your http requests and garbled messaged for https.
iframe 的连接和内容将被加密,但是,如果包含页面是 https,则用户的浏览器只会显示“锁定”图标,因此使 iframe https 和包含页面 http 是毫无意义的那个观点。
The iframe's connection and content will be encrypted, however, the user's browser will only show the "lock" icon if the containing page is https so making the iframe https and the containing page http is kind of pointless from that point of view.
仅对通过 https 连接检索的帧内容进行加密。
如果加密的帧内容引用(例如图像链接、其他帧等)内容,它可能仍然明确指定引用的内容未加密,例如
Only the frame content, retrieved through the https connection, is encrypted.
If the encrypted frame content references (e.g. image links, other frames, etc) content it might still explicitly specify that that referenced content is not encrypted e.g.
<img src="http://...."/>