HTTP为什么不安全？HTTP安全漏洞 Why is HTTP not secure? HTTP Security Gaps

最新推荐文章于 2024-09-07 14:00:00 发布

小小我大大天

最新推荐文章于 2024-09-07 14:00:00 发布

阅读量1.8k

点赞数 1

分类专栏：网络文章标签： http https 网络

本文链接：https://blog.csdn.net/u011225581/article/details/120367243

版权

HTTP请求和响应以明文形式传输，容易被监听窃取敏感信息。HTTPS通过TLS/SSL加密，保护数据安全，同时通过服务器的SSL证书进行身份验证，确保连接的合法性。HTTPS比HTTP更安全，是现代网络中数据传输的标准。

摘要由CSDN通过智能技术生成

HTTP requests and responses are sent in plaintext, which means that anyone can read them.

HTTP方式的请求和响应都是在明文下传输的，这就意味着任何人都可以读取它们的内容。

HTTP与HTTPS比较，不同之处有哪些？ HTTP vs. HTTPS: What are the differences?

HTTPS is HTTP with encryption. The only difference between the two protocols is that HTTPS uses TLS (SSL) to encrypt normal HTTP requests and responses. As a result, HTTPS is far more secure than HTTP. A website that uses HTTP has http:// in its URL, while a website that uses HTTPS has https://.

HTTPS方式是HTTP的方式上加上加密，唯一的区别就是HTTPS方式使用SSL/TLS对正常的HTTP请求和响应进行了加密。结果就是，HTTPS方式比HTTP更安全。使用HTTP方式访问的网站的URL前缀是http://，而相对的HTTPS的则是以https://开头。

What is HTTP?

HTTP stands for Hypertext Transfer Protocol, and it is a protocol – or a prescribed order and syntax for presenting information – used for transferring data over a network. Most information that is sent over the Internet, including website content and API calls, uses the HTTP protocol. There are two main kinds of HTTP messages: requests and responses.

HTTP意为超文本传输协议，它是一个用于在网络上传输数据的协议，或一个根据预定顺序的一种语法，为的是传输展示信息的。大多数在网络上的数据是以HTTP方式传输，包括网站内容和API调用。HTTP有两种消息，请求和响应。

In the OSI model， HTTP is a layer 7 protocol.

在OSI模型中，HTTP拥有7层。