ssl 证书 根证书
In order to be able to safely and securely accept and send sensitive information through a website, it is extremely important that information is encrypted when it is being sent back and forth from your site visitor and your website. The reason why this is so important is because it is extremely easy for anyone to eavesdrop and steal sensitive data while the data is being transmitted back and forth.
为了能够安全,安全地通过网站接收和发送敏感信息,从站点访问者和网站来回发送信息时,对信息进行加密非常重要。 之所以如此重要,是因为在来回传输数据时,任何人都非常容易窃听和窃取敏感数据。
As an example, someone may be using a public Wi-Fi hotspot at a cafe. When you connect to a password-protected Wi-Fi network, you are actually connected to an encrypted Wi-Fi connection and so the wireless data being sent back and forth between the router and your computer is encrypted. So if someone was trying to eavesdrop on the wireless connection, they would not be able to decrypt the data unless they are connected to the same Wi-Fi connection or unless they knew the passphrase to decrypt the data directly.
例如,某人可能正在咖啡馆使用公共Wi-Fi热点。 当您连接到受密码保护的Wi-Fi网络时,您实际上已连接到加密的Wi-Fi连接,因此在路由器和计算机之间来回发送的无线数据已加密。 因此,如果有人试图窃听无线连接,除非他们连接到相同的Wi-Fi连接,或者除非他们知道直接解密数据的密码,否则他们将无法解密数据。
So with this in mind, it is important that where any sensitive data can be accepted or sent to the visitor – your client – that the connection is secure and encrypted. But there are some problems with simply allowing an encrypted connection over the Internet. How can you be absolutely sure that the information your client is seeing and the information your server receives is authentic? How can you be sure that when you log in to a client area that the source code has not be tampered within a way which means you are submitting sensitive data to a criminal – even though it is encrypted? An SSL certificate does just that. It acts as the “trusted party” to determine whether a secure connection to a website is authentic and genuine.
因此,考虑到这一点,很重要的一点是,在可以接受任何敏感数据或将其发送给访客(您的客户端)的情况下,连接的安全性和加密性至关重要。 但是简单地允许通过Internet的加密连接存在一些问题。 您如何绝对确定客户端看到的信息和服务器收到的信息是真实的? 如何确保在登录到客户区时,源代码没有以某种方式被篡改(这意味着您正在向犯罪分子提交敏感数据,即使该数据已加密)? SSL证书就是这样做的。 它充当“受托方”来确定与网站的安全连接是否真实可信。
SSL certificates are issued by companies commonly referred to as Certification Authorities. Web browsers have a secure list of certification authorities it trusts. All the major Web browsers trust all the most common certification authorities, such as Alpha, VeriSign and GlobalSign. At eUKhost, we offer SSL certificates issued by Alpha and GlobalSign.
SSL证书由通常称为证书颁发机构的公司颁发 。 Web浏览器具有它信任的证书颁发机构的安全列表。 所有主要的Web浏览器都信任所有最常见的证书颁发机构,例如Alpha,VeriSign和GlobalSign。 在eUKhost,我们提供Alpha和GlobalSign颁发的SSL证书。
SSL证书如何工作? (How does an SSL certificate work?)
An SSL certificate is installed on a website, and each time a visitor browses a section of your website encrypted over SSL, a “public key” is sent by the server to your visitor’s Web browser. This public key is used to encrypt data before it is sent to the website your client is browsing, and vice versa. Once an encrypted connection is established and verified, all data transmitted both ways is encrypted.
SSL证书已安装在网站上,每次访问者浏览通过SSL加密的网站部分时,服务器都会向访问者的Web浏览器发送一个“公钥”。 此公共密钥用于加密数据,然后再将其发送到您的客户端正在浏览的网站,反之亦然。 一旦建立并验证了加密连接,双向传输的所有数据都将被加密。
SSL证书多少钱? (How much does an SSL certificate cost?)
It depends on the type of SSL certificate you need. The cheapest SSL certificates are domain validated certificates. These work by simply validating that you own the domain name you are purchasing the certificate for. For eCommerce stores and banks, they will want to assure their customers regarding the security of the connection by paying more for a certificate which offers organisation authentication checks. These types of certificates not only verify the domain, but also the organisation which owns the domain – hence, organisational authentication.
这取决于您需要的SSL证书的类型。 最便宜的SSL证书是域验证证书 。 通过简单地验证您是否拥有要购买证书的域名,它们就可以工作。 对于电子商务商店和银行,他们将希望通过为提供组织身份验证检查的证书支付更多费用,以确保其客户对连接的安全性。 这些类型的证书不仅会验证域,还会验证拥有该域的组织,因此将验证组织。
我需要SSL证书吗? (Do I need an SSL certificate?)
Yes, you need an SSL certificate. As a matter of fact, if you need to comply with PCI DSS, part of that process is through the use of an SSL certificate. All Web browsers will stop and warn a user with a scary warning if a website is using an invalid SSL certificate or if they are not using one at all. Not using an SSL certificate in areas which are secured over SSL will result in a dramatic fall in revenue and can be devastating to your business image.
是的,您需要一个SSL证书。 事实上,如果您需要遵守PCI DSS,则该过程的一部分是通过使用SSL证书。 如果网站使用无效的SSL证书,或者网站根本没有使用SSL证书,则所有Web浏览器都会停止并警告用户。 在通过SSL保护的区域中不使用SSL证书会导致收入急剧下降,并可能破坏您的企业形象。
使用SSL证书有多容易? (How easy is it to use an SSL certificate?)
When you purchase an SSL certificate with us, you can submit a support ticket to request assistance in installing your certificate on your website. Don’t worry, we won’t charge a fee for helping you install it – it’s free.
当您向我们购买SSL证书时,您可以提交支持请求以请求协助,以在您的网站上安装证书。 不用担心,我们将不收取任何帮助您安装它的费用-它是免费的。
You can find out more about our range of SSL certificates here. Have any questions? Call our friendly and knowledgeable sales team on 0800 862 0380.
您可以在此处找到有关我们SSL证书范围的更多信息。 有什么问题吗? 致电0800 862 0380与我们友好而知识渊博的销售团队联系。
翻译自: https://www.eukhost.com/blog/webhosting/ssl-certificates/
ssl 证书 根证书