WLAN 上需要 HTTPS 吗？
我对 HTTPS 及其在 LAN 应用程序中的地位感到困惑。我有两台计算机，我的程序将在它们之间发送信息。这两台计算机都连接到同一个无线网络，因此实现很简单。但是，在这种情况下我应该使用 HTTPS 吗？或者仅当信息发送到网络外部的服务器时才使用 HTTPS？虽然发送和接收的信息不一定是机密的，但它可能包含可被视为私有的数据。如果我应该使用 HTTPS，我是否必须购买证书？谢谢
I'm confused about HTTPS and its position in LAN applications. I have two computers and my program will send information between them. Both these computers are connected to the same wireless network so it's a simple implementation. However, should I be using HTTPS in this scenario? Or is HTTPS only used when information is being sent to a server outside the network? Whilst the information being sent and received is not necessarily confidential, it may contain data that could be considered private. If I should use HTTPS, do I have to buy a certificate? Thanks
如果你对这篇内容有疑问，欢迎到本站社区发帖提问 参与讨论，获取更多帮助，或者扫码二维码加入 Web 技术交流群。
绑定邮箱获取回复消息
由于您还没有绑定你的真实邮箱，如果其他用户或者作者回复了您的评论，将不能在第一时间通知您！
发布评论
评论（4）
从 http://www.startssl.com/?app=1 获取免费证书，设置提醒以在一年内续订并认为已完成。
话虽如此，在您的特定情况下，如果您的 WiFi 本身已正确加密，您无需使用 HTTPS 即可摆脱困境。
Get a free certificate from http://www.startssl.com/?app=1, set a reminder to renew it in one year and consider it done.
Having said that, in your particular case you can get away without HTTPS if you WiFi is properly encrypted itself.
两台计算机都位于同一网络（WLAN 或 LAN 并不重要），网络上的任何其他人都可以拦截/嗅探您的流量。我会听取卡巴邦加的建议并获得证书。它不需要签名（即您可以免费制作一个），但对于生产应用程序来说，这可能是值得的。
Both computers are on the same network (WLAN or LAN doesn't really matter) anyone else on the network could intercept/sniff your traffic. I would take cababunga's advice and get a cert. It does not need to be signed (ie you can make one free) but for a production app it might be worth it.
这是一个权衡。依赖周边安全通常被认为是一个非常糟糕的主意。如果您完全乐意传输该数据，那么您可以这样做。当然，wifi 的安全性是出了名的差。例如，您可以处理伪装成您自己的接入点的恶意接入点吗？
对于 https，从受信任的 CA 获取有效证书是最简单、最安全且可能最便宜的途径。
It's a trade off. Depending upon perimeter security is generally considered a really bad idea. If you are completely happy transmitting that data then you could do so. Of course wifi is notoriously bad for security. Could you deal with a rogue access point masquerading as your own, for instance?
For https, getting a valid certificate from a well-trusted CA, is the simplest, safest and probably cheapest route.
当然，HTTP 和 HTTPS 在这里无关紧要，除非计算机使用这些协议相互通信。您真正谈论的是一种保护传输中数据的加密方法。我通常的基本假设是将 WLAN 视为互联网 - 任何人都可以监听，因此如果可能的话，您可以对 WLAN 进行加密配置（现在大多数无线路由器都支持 WPA2/TKIP/AES，应该考虑）相当强大）或者您配置 通过 SSL 之类的 VPN 并使用证书作为按照 Cowabunga/Darren 的说法，这样你就可以获得比密码更强的强度。
Of course HTTP and HTTPS are irrelevant here unless the computers are using those protocols to communicate with each other. What you are really talking about is an encryption method to protect data in transit. My usual basic assumption is to treat a WLAN as the Internet - anyone can listen, so you either configure the WLAN with encryption if possible (most wireless routers these days support WPA2/TKIP/AES which should be considered reasonably strong) or you configure a VPN over something like SSL and use a cert as per Cowabunga/Darren so you get greater strength than passwords.