I-Secure Socket Layer noma i-SSL iyiphrothokholi ehlukile yokuvikela esetshenziswa iziphequluli zewebhu namaseva ewebhu ukusiza umsebenzisi ukuvikela idatha yakhe yomuntu siqu kuwebhusayithi. Isitifiketi se-SSL siqukethe ukhiye "womphakathi" kanye "noyimfihlo", oqinisekisa ngokuzenzakalelayo futhi ubethele ulwazi. Uma umsebenzisi evakashela iwebhusayithi enesitifiketi se-SSL esinikwe amandla, iseva isebenzisa ukhiye "womphakathi" ukuze inikeze uxhumano olubethelwe esipheqululini. Uma isitifiketi sisebenza, isiphequluli "siqinisekisa" ngokuzenzakalelayo ukuthi okhiphe isitifiketi uqinisekisiwe futhi iwebhusayithi evakashelwe ivikelekile. Le nqubo ibizwa ngokuthi ukuxhawula.
Ukubethela kuyinqubo yezibalo eyinkimbinkimbi lapho ulwazi lubhalwa khona futhi lukhishwe ikhodi. Ukubethela kuqinisekisa ukuthi ulwazi lubethelwe ngesikhathi sokudluliselwa kwalo ngakho-ke umamukeli walo kuphela ongakwazi ukulinquma. Inombolo yamabhithi esitifiketi (40 bit, 56 bit, 128 bit, 256 bit) ikubonisa usayizi wokhiye osetshenziselwa ukubethela. Uma ukhiye umkhulu, iphasiwedi iba nkulu kanye nezinhlanganisela zokususwa kwemfihlo ezingaba khona. Ukuze sibonise ukuvikeleka okunikezwa izitifiketi ze-SSL, sizokunikeza inombolo yezinhlanganisela ezingaba khona zesitifiketi se-128-bit - sinikeza izinhlanganisela ezingenzeka zamathriliyoni ambalwa ukuze ususwe ukubethela. Ungalinganisela ukuthi kuzothatha isigebengu esinamandla esingaba yizigidi zezigidi zeminyaka ukuze sisuse ukubethela iseshini ebethelwe ngesitifiketi se-SSL.
Zonke izitifiketi ze-SSL zikhishwa ngokusekelwe egameni lekhasimende eli-ode isitifiketi, ikheli lalo, ucingo kanye nekheli le-imeyili. Isitifiketi se-SSL naso sikhishwa ngokusekelwe esizindeni lapho iwebhusayithi itholakala khona. Lokhu kusho ukuthi lesi sitifiketi sivumeleke kulesi sizinda kuphela.
Impela zonke izitifiketi ze-SSL zikhishwa ngokusekelwe esizindeni lapho iwebhusayithi isingathwe khona. Yini esingayenza uma sinezizinda ezingaphansi eziningi kule webhusayithi futhi sifuna ukuthi nazo zisebenzise isitifiketi se-SSL? Kungakho isitifiketi se-Wildcard sethulwa - sisebenza kuzo zonke izizinda ezingaphansi kwewebhusayithi.
Uma uvakashela iwebhusayithi, isiphequluli sakho siqala ngokuzenzakalelayo ukubuyisa isitifiketi saso se-SSL futhi senza ukuhlola okumbalwa okudingekayo kusitifiketi ngasinye - ukuthi ingabe isitifiketi siphelelwe yisikhathi nokuthi sikhishwe yiziphathimandla zesitifiketi isiphequluli "esisethembayo". Uma okunye kwalokhu kuhlola kuhluleka, isiphequluli sizokhipha isixwayiso esivakashi. Uma ukuhlolwa kuphumelela, singahlola amamethrikhi ambalwa okuvikela akhelwe kuziphequluli zesimanje:
- Ukuqala kwekheli lewebhu kushintsha kusuka ku-http:// kuya ku- HTTPS:// .
- Isithonjana sokukhiya i-padlock siyavela kubha yekheli lewebhusayithi.
- Umbala wenkundla yekheli uzoshintsha ube luhlaza okwesibhakabhaka noma oluhlaza okotshani, kuye ngokuthi yisiphi isitifiketi esifakiwe nokuthi yisiphi isiphequluli esisetshenziswayo.
Impendulo emfushane yalo mbuzo ithi YEBO. Izitifiketi zekilasi eliphezulu zisebenza ngesisekelo sobuchwepheshe obuthuthuke kakhulu, okubenza bavikeleke kakhulu. Izinkampani eziningi zokunikeza izitifiketi zisebenzisa ubuchwepheshe ukuvimbela uhlelo olungayilungele ikhompuyutha nohlelo olungayilungele ikhompuyutha kuwebhusayithi yakho.
Ama-EV izitifiketi ezinokuqinisekiswa okunwetshiwe. Ngo-2006, i-CA / Browser Forum, iqembu labathengisi bezitifiketi abahamba phambili nabathuthukisi besiphequluli (CA) noma Iziphathimandla Zesitifiketi (ama-CAs), zagunyaza imihlahlandlela embalwa evamile yokukhipha nokuqinisekisa izitifiketi ze-EV. . Ngakho, indlela isitifiketi se-EV esiboniswa ngayo ishintshiwe ukuze isivakashi sibone kalula ukuthi le webhusayithi inezinga eliphezulu lokuvikela. Lezi zitifiketi ziboniswa ngebha eyengeziwe eluhlaza, ezihlukanisa kwezinye izitifiketi, ezivezwa ngombala oluhlaza okwesibhakabhaka noma oluhlaza okotshani ekhelini.
Ngesitifiketi esinjalo, abanikazi bangakwazi ukuzivikela kubazenzisi abafuna ukweba umkhiqizo wabo namakhasimende.
Kubalulekile ukwazi ukuthi izitifiketi ze-EV ezineribhoni eluhlaza zingakhishelwa izinhlangano ezisemthethweni kuphela. Ngaphezu kwedatha evamile edingekayo ekukhishweni kwesitifiketi, imibhalo evela kumuntu omele inkampani noma inkampani okufakazelwa ngayo ukubhaliswa kwayo.
Amadokhumenti kumelwe abe ngesiNgisi ngokuphelele. Incazelo egcwele yezimfuneko ingatholakala ngezansi:
1. Izikhungo ezingathenga futhi zifake isicelo sesitifiketi se-EV yilezi ezilandelayo:
- Izinhlangano zikahulumeni
- Amafemu nezinkampani
- Abathengisi bodwa
- Izinhlangano ezingenzi nzuzo
- Izinkampani ezisebenzisanayo
Amadokhumenti adingekayo ukuze kukhishwe isitifiketi se-SSL kufanele afake lokhu okulandelayo:
- Inombolo yokubhaliswa kwenkampani noma yenhlangano
- Usuku lokufakwa kwenkampani noma inhlangano
- Ikheli lenhlangano noma lenkampani (noma ikheli lesikhulu esibhalisa isitifiketi se-SSL)
- Inhlangano noma inkampani kufanele ngabe yabhaliswa eminyakeni engaphezu kwengu-3 edlule
- Ukuqinisekiswa kwenhlangano ngokwengeziwe kwenziwa ngokuqinisekiswa ku-akhawunti yasebhange
2. Izimfuneko zesizinda lapho kuzofakwa khona isitifiketi se-SSL:
- Ukuze ufaneleke ukuthola isitifiketi se-EV SSL, isizinda kufanele sibhaliswe egameni lenkampani noma lenhlangano
- Uma isizinda sinokuvikelwa kobumfihlo be-Whois okuvuliwe, le nketho kufanele ivaliwe
- Ngesikhathi sokuqinisekiswa kwesizinda, inhlangano ekhipha isitifiketi (i-GeoTrust, i-VeriSign noma i-Sectigo) izodinga ukuhlolwa kwezwi ngokushayela umnikazi wesizinda.
3. Izimfuneko kumuntu ocela isitifiketi se-SSL:
- Isikhulu esibandakanyekayo ohlelweni lokuqinisekisa kumele siqashwe yinkampani efanayo
- Umuntu ugunyazwe ukuthi aqinisekise isitifiketi se-EV yinkampani noma inhlangano
- Amadokhumenti engeziwe adinga ukugcwaliswa, okumele abhalwe phansi
- Umbono osemthethweni ovela enkampanini noma inhlangano
4. Njengesheke elengeziwe lenhlangano, kudingeka ukuthi ushayele ucingo umuntu onomthwalo wemfanelo wale nhlangano. Ukuhlolwa kocingo kwenziwa ngokuqondile yiziphathimandla ezikhiphayo. Ngesikhathi sokuhlolwa kocingo, kuzodingeka ukuthi wenze lokhu okulandelayo:
- Igama lomuntu ocela isitifiketi
- Ukugunyazwa kwesitifiketi se-EV
- Ukuhambisana nemibandela ejwayelekile ehlinzekwa yisiphathimandla esikhiphayo
Ibha yekheli ebomvu ( https: // ikhombisa ukuthi akuzona zonke izixhumanisi kuwebhusayithi yakho ezibethelwe. Lokhu umbala AWUbonisi ukuthi isitifiketi se-SSL asifakiwe ngendlela efanele. Ukuze ubone isitifiketi kumbala waso ovamile oluhlaza noma oluhlaza okwesibhakabhaka, udinga ukumisa zonke izixhumanisi kuwebhusayithi yakho ukuze uphume ngephrothokholi ye-https: // hhayi nge-http evamile: // Ama-CMS amaningi, isibonelo, anenketho kuphaneli yomqondisi ekuvumela ukuthi ushintshele kule modi ngokushesha.