授予网站访问权限
我想知道是否有一种方法可以以与应用程序许可工作类似的方式控制对网站的访问,只允许整个互联网上的给定计算机访问它们......我找不到唯一标识给定计算机的方法或丢弃除授权机器之外的所有机器...我不想要用户/密码方法,因为它可以共享。
I was wondering if there's a way to control access to a website on a similar way than app licensing works, allowing only given computers on the entire Internet to access them... I can't find a way to uniquely identify a given computer OR to discard all machines except the authorized ones... I don't want a user/password approach as it can be shared.
如果你对这篇内容有疑问,欢迎到本站社区发帖提问 参与讨论,获取更多帮助,或者扫码二维码加入 Web 技术交流群。
绑定邮箱获取回复消息
由于您还没有绑定你的真实邮箱,如果其他用户或者作者回复了您的评论,将不能在第一时间通知您!
发布评论
评论(3)
您最好的选择是 SSL 证书。让客户端向您发送证书签名请求,使用您的自定义 CA 对其进行签名,然后向他们提供用于连接到您的证书。确保它直接与特定主机名(系统的主机名)关联。不完全万无一失,但更好。
Your best option here is SSL certificates. Get the client to send you a certificate signing request, sign it with your custom CA, and give them a certificate to use to connect to you with. Ensure that it ties directly to a particular hostname, the hostname of the system. Not entirely fool proof, but better.
IP 地址发生变化。 MAC 地址可能被欺骗。计算机名称由用户设置,并且计算机可以更改位置、操作系统、硬件组件和所有者。
用户名/密码组合在网络上如此流行是有原因的。而且,就我个人而言,如果它对谷歌来说足够安全,那么对我来说也足够安全。
IP addresses change. MAC addresses can be spoofed. Computer names are set by the user, and computers can change locations, operating systems, hardware components, and owners.
There's a reason that the username/password combination is so prevalent on the web. And, personally, if it's secure enough for Google, it's secure enough for me.
您可以通过IP限制或MAC地址限制来限制访问。 apache等http服务器都有访问控制模块。您可以从 http://httpd.apache.org/docs 找到有关它的更多信息/2.2/howto/access.html
You can limit the access by IP restriction or mac address restriction. Http server such as apache have access control modules. You can find more information about it from http://httpd.apache.org/docs/2.2/howto/access.html