识别 HTTPS 连接中的目标
浏览器如何确定 HTTPS 连接中的目的地?所有标题均已加密..
更新:不,这不是作业..我的名字是学生,因为我将永远在这个巨大而令人敬畏的领域学习
How does the browser figure out the destination in an HTTPS connection? All the headers are encrypted..
Update:No this is not a homework.. my name is student because I'll always be learning in this HUGE awesome field
如果你对这篇内容有疑问,欢迎到本站社区发帖提问 参与讨论,获取更多帮助,或者扫码二维码加入 Web 技术交流群。
绑定邮箱获取回复消息
由于您还没有绑定你的真实邮箱,如果其他用户或者作者回复了您的评论,将不能在第一时间通知您!
发布评论
评论(3)
当浏览器查看像 https://www.gmail.com/ 这样的 url 时,浏览器所做的第一件事就是解析
www.gmail.com
到72.14.213.19
。接下来,您的浏览器在端口 443 上打开到
72.14.213.19
的 TCP 连接。在传输任何标头之前,服务器会根据数字签名的 SSL 证书协商公钥加密方案 (RSA)。
在此过程中,浏览器在通信之前检查证书的真实性。
一旦客户与客户之间建立了这种信任,服务器已经建立,客户端现在可以以服务器可以解密的方式加密标头。它继续在 SSL 隧道内发出 HTTP 请求。
服务器解密消息,服务请求并以特定客户端可以解密的方式对其进行加密。
然后浏览器解密响应,读取标头并决定如何继续。
这是 HTTPS 连接事件的概述。 :D
When a browser views an url like https://www.gmail.com/ first thing your browser does is resolves
www.gmail.com
to72.14.213.19
.Next your browser opens up a TCP connection to
72.14.213.19
on port 443.The browser & server before ANY headers are transmitted negotiate a public key encryption scheme (RSA) based on the SSL Certificate that is digitally signed.
In this process the browser checks the certificate authenticity before communicating.
Once this trust between client & server has been established, the client now can encrypt the headers in a way the server can decrypt. It proceeds to make the HTTP request inside the SSL Tunnel.
The server decrypts the message, serves the request and encrypts it in a way that that particular client can decrypt.
The browser then decrypts the response, reads the headers and makes decisions about how to proceed from there.
This has been an overview of an HTTPS connection event. :D
浏览器使用您在浏览器中输入的包含 https: 的字符串。也就是没有加密,
The string containing https: that you typed in the browser is what the browser uses. That is not encrypted,
可能比您想要或需要了解的更多关于 HTTPS 连接的前几毫秒 如果您的用户名不是学生,我会更详细地解释一些内容,而这不太可能是家庭作业。
Probably more than you'd ever want or need to know about the The First Few Milliseconds of an HTTPS Connection I'd go into more detail explaining stuff if your username wasn't student, and this wasn't likely homework.