Njengabahlinzeki bamafu, siyazi ukuthi kubalulekile ukunikeza amakhasimende ethu indawo ephephile ngaso sonke isikhathi. Nsuku zonke, amawebhusayithi amaningi azama ukuzenza amasayithi aphephile ukuze enze ukukhwabanisa nokweba idatha yomuntu siqu noma yezezimali. Ngenxa yalesi sizathu, kungumthwalo wethu wemfanelo ukuba nezitifiketi zedijithali eziqinisekisa ukuba semthethweni kwewebhusayithi yethu, ngaleyo ndlela sinikeze isayithi elithembekile lapho yonke imisebenzi yenziwa khona ngokuxhumeka okubethelwe.
Isitifiketi se-SSL simele i-Secure Socket Layer futhi sisebenza njengephrothokholi yokuphepha, kanye ne-TLS, evikela idatha yethu kanye neyamakhasimende ethu ngokubethela ulwazi nokuqinisekisa ubuwena. Empeleni, uma sikhuluma nge-SSL namuhla, sibhekisela ekuhlanganisweni kobuchwepheshe be-SSL/TLS obuvumela iwebhusayithi yethu ukuthi ilayishe nge -HTTPS futhi ibonise i-padlock yokuphepha kusiphequluli.
Siyini ngempela Isitifiketi se-SSL futhi sisebenza kanjani?
Isitifiketi se-SSL yisitifiketi sedijithali esiqinisekisa ubuwena bewebhusayithi futhi sivumele ukuxhumana okubethelwe phakathi kwesiphequluli somsebenzisi kanye neseva. Siqukethe ulwazi oluyisihluthulelo njengegama lesizinda , inhlangano ephethe, i -Certificate Authority ekhiphayo (CA), usuku lokuphelelwa yisikhathi kwesitifiketi, kanye nokhiye womphakathi osetshenziselwa ukubethela.
Lolu hlelo lusekelwe kungqalasizinda yokhiye womphakathi (i-PKI) esebenza ngezihluthulelo ezimbili: ukhiye womphakathi , owabelwana ngesitifiketi, kanye nokhiye oyimfihlo , ogcinwa uphephile kuseva . Idatha ehamba phakathi kwesiphequluli kanye neseva ibethelwe ukuze, noma ngabe umhlaseli uyivimba, abone kuphela ulwazi olungafundeki.
Uma isivakashi sifika kuwebhusayithi enesitifiketi se-SSL, inqubo ezenzakalelayo eyaziwa ngokuthi “ukuxhawulana” kwe-SSL/TLS iyenzeka :
- Isiphequluli sixhuma kwiseva futhi icela umazisi wakho.
- Iseva ithumela ikhophi yayo Isitifiketi se-SSL ngokhiye womphakathi kanye nedatha yenhlangano.
- Isiphequluli Qinisekisa ukufaneleka kwesitifiketi ukubonisana ne-CA ekhishwayo kanye nokuhlola izinsuku, isizinda kanye nokuhoxiswa okungenzeka.
- Uma konke kulungile, isiphequluli sikhiqiza a ukhiye weseshini kanye ne-cipher enokhiye womphakathi weseva.
- Iseva isusa ukubethela lowo khiye ngawo ukhiye oyimfihlo, ithumela ukuvuma okusayiniwe futhi iseshini evikelekile iyasungulwa.
- Kusuka lapho, yonke ithrafikhi Idatha ephakathi kwesiphequluli neseva ibethelwe futhi ivikelwe ekulaleleni nasekukhohlisweni.
Le nqubo yenzeka ngama-millisecond futhi isobala kumsebenzisi, obona kuphela i -padlock , isiqalo se -HTTPS kanye, kwezinye izimo, igama lenkampani kubha yekheli.
Izinhlobo zezitifiketi ze-SSL iwebhusayithi yakho engazisebenzisa
Kunezinhlobo ezahlukene zezitifiketi ze-SSL emakethe ezivumelana nezidingo zephrojekthi ngayinye eku-inthanethi. Zonke zinikeza izinga eliqinile lokubethela ; okuhlukahlukayo izinga lokuqinisekiswa kanye nobubanzi ngokwezizinda kanye nezizinda ezincane.
Ngokusho kwezinga lokuqinisekiswa kobunikazi :
- Ukuqinisekiswa Kwesizinda (DV) SSLIqinisekisa ukuthi umceli ulawula isizinda (isibonelo, ngokuphendula i-imeyili noma inselele ye-DNS). Iyashesha futhi ayibizi, ilungele ama-blogs, amawebhusayithi omuntu siqu noma amasayithi angayibambi idatha ebalulekile.
- Ukuqinisekiswa Kwenhlangano (OV) SSLNgaphezu kwesizinda, i-CA ihlola idatha kusuka ku- inkampani noma inhlangano (Igama elisemthethweni, ikheli, inombolo yocingo). Kunconyelwe amakhasi ezinkampani kanye namabhizinisi afuna ukuqinisa isithombe somkhiqizo wabo.
- Ukuqinisekisa Okunwetshiwe (EV) SSLLenza ukuqinisekiswa okuphelele kobunikazi obusemthethweni kanye nobunikazi besizinda. Inikeza i izinkomba eziphezulu zokuzethemba, ukubonisa igama lenkampani kubha yesiphequluli futhi kube inketho ekhethwayo I-ecommerce kanye namaphrojekthi anobungozi obukhulu.
Ngokusho kobubanzi ngokwezizinda ezimbozwayo:
- Isizinda esiyingqayizivele: ivikela igama lesizinda esisodwa (isb. mydomain.com).
- I-Wildcard: iqinisekisa isizinda futhi zonke izizinda zayo ezingaphansi izinga eliphezulu (isb. store.mydomain.com, blog.mydomain.com…).
- Isizinda esiningi: ivumela ukuvikeleka izizinda eziningana ezahlukene ngaphakathi kwesitifiketi esifanayo, siwusizo kakhulu ezinkampanini ezinemikhiqizo embalwa.
Izinzuzo zekhasi lethu elineSitifiketi se-SSL ziyahlukahluka:
Ukuphepha kwakho nekhasimende lakho
Ukuba nephrothokholi yokuphepha ekhona kuqinisekisa ukuvikelwa kwedatha yakho yezezimali neyomuntu siqu, kanye neyamakhasimende akho. Ukubethela kwe-SSL/TLS kuqinisekisa ukuthi amaphasiwedi, izinombolo zamakhadi, amakheli, kanye namadokhumenti kudluliselwa ngendlela engafundeki kubantu besithathu , okunciphisa kakhulu ingozi yokwebiwa kwedatha.
Ngaphezu kobumfihlo, isitifiketi sinikeza ubuqotho bedatha : uma othile ezama ukushintsha ulwazi oluthuthwayo, isiphequluli sizobona ukushintshwa bese sinqamula uxhumano. Lokhu kubalulekile kumafomu, izindawo ezizimele, amasango okukhokha , kanye nama-intranet.
Ukuthengisa kuyanda
Ukuba nendawo ephephile kukhulisa ukuzethemba kwamakhasimende ngqo , ngaleyo ndlela kukhuphule ukuthengisa nokuguqulwa. Ukubona nje i -HTTPS padlock kanye ne-trust seals kunciphisa ukwesaba ukufaka idatha futhi kukhuthaza amakhasimende ukuthi aqedele inqubo yokuthenga.
Izifundo eziningana zibonisa ukuthi amawebhusayithi anezinkomba zokuphepha ezibonakalayo afinyelela amazinga aphezulu okuguqulwa , izinqola zokuthenga ezinkulu, kanye nokushiywa okumbalwa ezinyathelweni zokugcina zenqubo yokukhokha, into ebaluleke kakhulu ezitolo eziku-inthanethi nasemabhizinisini ezinsizakalo.
Umshwalense womcimbi
Izinketho eziningi zokuthenga isitifiketi se-SSL zifaka phakathi uhlobo oluthile lomshuwalense wezezimali . Lomshuwalense usebenza njengesivikelo esengeziwe ekukhwabaniseni , amaphutha amakhulu okuqinisekisa, noma ukungasebenzi kahle kwesitifiketi.
Nakuba kungasithathi indawo yenqubomgomo enhle yokuphepha kwangaphakathi, ukuba nalesi siqinisekiso esengeziwe kuqinisa isikhundla senkampani lapho kubhekene nezigameko ezingase zihlobane nokuthembana kwedijithali.
Ukuvikelwa ekuhlaseleni kobugebengu bokweba imininingwane ebucayi kanye nokuhlasela komuntu ophakathi nendawo
Enye yezinto ezikhathazayo kakhulu i -phishing : abahlaseli abakha amakhophi mbumbulu amawebhusayithi asemthethweni ukuze babambe iziqinisekiso noma ulwazi lokukhokha. Isitifiketi esihle se-SSL, ikakhulukazi isitifiketi se-OV noma se-EV, sinikeza izindlela eziqinile zokuqinisekisa iwebhusayithi ezisiza abasebenzisi ukuhlukanisa iwebhusayithi esemthethweni nekhophi ekhohlisayo.
Ngaphezu kwalokho, ukusetshenziswa kwe-HTTPS kunciphisa ukuhlaselwa kwe-Man-in-the-Middle (MITM) , lapho umuntu wesithathu ezama ukuzibeka phakathi komsebenzisi neseva ukuze avimbele noma ashintshe ukuxhumana. Ngenxa yokuthi isiteshi sibethelwe futhi siqinisekisiwe, lezi zinhlobo zokuhlaselwa ziba nzima kakhulu ukuzenza.
Amanani ahlukene kanye nezinketho emakethe
Izinkampani eziningi zokuphepha kwewebhu zinikeza izitifiketi ze-SSL ezinezinketho namanani ahlukene kuye ngezidingo zephrojekthi ngayinye. Lokhu kusuka kuzitifiketi zamahhala noma ezingabizi kakhulu zamabhulogi namawebhusayithi omuntu siqu kuya kuzixazululo ze-EV ezithuthukisiwe ezinamazinga aphezulu okuqinisekisa nokusekelwa okubalulekile.
Ukukhetha uhlobo olufanele kukuvumela ukuthi uthuthukise ubudlelwano phakathi kwezindleko, idumela kanye nezimfuneko zomthetho , ukuze noma iyiphi inkampani, kungakhathaliseki ukuthi ingakanani, ikwazi ukufinyelela izinga lokuphepha elihambisana nomsebenzi wayo.
Umthelela we-SSL ku-SEO, ukubonakala, neziphequluli
Ukusebenzisa i-HTTPS akugcini nje ngokuthuthukisa ukuphepha: futhi kunethonya eliqondile ekubonakaleni kwezinjini zokusesha kanye nendlela iwebhusayithi ebonwa ngayo kuziphequluli zanamuhla.
- Izinjini zokusesha ezifana ne-Google zibheka i-HTTPS njenge- isici simo, ukuthanda amasayithi avikelekile kunalawo aqhubeka nokusebenzisa i-HTTP.
- Iziphequluli zimaka amakhasi angenaso isitifiketi njenge “Angiphephile”, ekhombisa izaziso ezingase ukwesabisa abasebenzisi nangaphambi kokuba babone okuqukethwe.
- Ngokusebenzisa i-SSL, kungenzeka ukusizakala ngentuthuko yezobuchwepheshe njenge I-HTTP / 2, enikeza isivinini sokulayisha ngokushesha kanye nolwazi lokuphequlula olushelelayo.
Konke lokhu kuholela ekuhlangenwe nakho okungcono komsebenzisi , isikhathi eside esichithwa kusayithi, kanye nezimpawu zokuziphatha ezingcono, izinto ezisiza ukuhlanganisa isu le-SEO esikhathini esiphakathi nesikhathi eside.
Kungani i-SSL ibaluleke kangaka esitolo esiku-inthanethi?
Ukuba nesitifiketi se-SSL kubalulekile ukuqinisekisa amakhasimende ethu ukuthi isayithi abalivakashelayo lisemthethweni nokuthi bangasithemba ngemininingwane yabo yezezimali. Kwezentengiselwano ze-e-commerce, lesi sidingo cishe asinakuxoxiswana ngaso: amasango okukhokha, amabhange, amapulatifomu okuqoqa, kanye nemithetho yokuvikela idatha konke kudinga ukuthi ukuthengiselana kwenziwe ngokuxhumeka okubethelwe.
Uma unesitolo esiku-inthanethi, kubalulekile ukucabangela ukuthola isitifiketi se-SSL ukuze unikeze amakhasimende akho ulwazi olungcono lokuthenga, unciphise izinkinga zokushiywa ngaphandle kokukhokha, uhambisane nezindinganiso zokuphepha, futhi ubonise ukuthi inkampani yakho ithatha ukuvikelwa kolwazi ngokungathi sína.
Njengamanje, iziphequluli eziningi kanye nezinhlelo zokusebenza zeselula nezedeskithophu zisekela i-SSL/TLS futhi zilindele ukuthi i-HTTPS ibe yindinganiso . Ukuzivumelanisa nale ndawo kubalulekile ekugwemeni ukulahlekelwa yithrafikhi, ukwethenjwa, kanye nokuthengisa kubancintisani asebevele beshintshele kuwebhu ephephile.
Ukuhlanganisa isitifiketi se-SSL kuphrojekthi yakho yedijithali akuyona nje isinqumo sobuchwepheshe: kuwukutshalwa kwezimali okunesu ekuphepheni, edumeleni, nasekukhuleni , okuqinisa ubudlelwano bakho nabasebenzisi bakho kanye nokuqinisa ukuba khona komkhiqizo wakho ku-inthanethi.
