Isitifiketi HTTPS-free: ulandele iziyalezo ezikuyo wathola

Uma ukuqoqa nanoma yiluphi ulwazi ebalulekile kuwebhusayithi yayo (kufaka e-mail kanye nephasiwedi), khona-ke udinga ukuthatha isinyathelo ukuze uphephe. Enye yezindlela ezingcono kakhulu ukuze uzivikele - ukunika amandla isitifiketi HTTP, eyaziwa nangokuthi i-SSL (Secure Sockets Layer) ukuthi lonke ulwazi zilethwe iseva yakho futhi ephuma it is ngokuzenzakalelayo ngekhodi. isitifiketi HTTPS kuvimbela kubaduni ukugqekeza ulwazi oluyimfihlo abasebenzisi bakho 'ngesikhatsi isitoreji yalo ku-intanethi. Bayoba nomuzwa ephephile uma bebona isitifiketi HTTPS uma ufinyelela kusayithi lakho, - ukwazi ukuthi ivikelwe isitifiketi zokuphepha.

isitifiketi Izinzuzo HTTPS

Into engcono e isitifiketi se-SSL, njengoba e-HTTPS - ukuthi Kulula ukuhlela, futhi uma lokho kwenziwa, uzodinga ukuthumela abantu ukuba basebenzise isitifiketi HTTPS esikhundleni HTTP. Uma uzama ukufinyelela indawo yakho, ukubeka i-https: // ukukhombisa i-URL yakho manje, uzothola nephutha isitifiketi HTTP. Lokhu kungenxa yokuthi awuzange ufake HTTPS Isitifiketi se-SSL. Kodwa ungakhathazeki - sizakwenza isethaphu manje!

Izivakashi zakho uyozizwa ephephile kusayithi lakho uma bebona isitifiketi HTTPS uma ufinyelela kusayithi lakho - ukwazi ukuthi ivikelwe isitifiketi zokuphepha.

Kuyini HTTPS?

HTTP noma HTTPS uboniswa ekuqaleni URL-ikheli isayithi ngayinye Web isiphequluli seWebhu. HTTP - Isidlulisilwazi kuwebhu kuyinto, futhi S e-HTTPS - Secure. Ngokuvamile, ichaza uphrothokholi by ngalo idatha esithunyelwe phakathi isiphequluli sakho kanye wewebusayithi yokubuka.

isitifiketi HTTPS kuqinisekisa ukuthi konke ukuxhumana phakathi isiphequluli sakho kanye website oyibukayo kubethelwe. Lokhu kusho ukuthi kuphephile. Kuphela ukuthumela nokwamukela amakhompyutha ungabona ulwazi uma ukuthumela idatha (abanye ukufinyelela, kodwa awukwazi ulifunde). Emasayithini evikelekile isiphequluli seWebhu ubonisa isithonjana yokuvala i-URL-ikheli ukuze sikwazise.

HTTPS kufanele kube nakwenye iwebhusayithi eqoqa amaphasiwedi, izinkokhelo, ulwazi lwezokwelapha noma enye idatha ebucayi. Kodwa kuthiwani uma ungathola mahhala futhi isitifiketi SSL evumelekile isizinda sakho?

Kanjani ukuvikelwa iwebhusayithi?

Ukuze unike amandla HTTPS isitifiketi sokuphepha, udinga ukufaka i- SSL (Secure Socket Layer). Uqukethe ukhiye womphakathi, okuyilona elidingekayo ukuze umuntu isiqalo ephephile esimisweni. Lapho ecelwe HTTPS-uxhumano ikhasi lewebhu, isayithi uthumela isitifiketi SSL kusiphequluli sakho. Base ukuqalisa "ukuxhawula SSL», okubandakanya ukwehlukana "izimfihlo" ukusungula ukuxhumana okuphephile phakathi isiphequluli sakho kanye kuwebhusayithi.

Standard SSL eziphambili

Uma isayithi isebenzise isitifiketi SSL standard, uzobona isithonjana sokukhiya ku-URL-ikheli isiphequluli. Uma usebenzisa isitifiketi enwetshiwe Ukuqinisekisa (EV), yekheli noma i-URL-ikheli kuyoba luhlaza. EV SSL amazinga SSL idlule amazinga. isitifiketi EV SSL inikeza ubuntu umnikazi domain. Ithola isitifiketi EV SSL futhi kudinga izicelo tekuhambela azinabo kokuhlaziywa inqubo ukuqinisekisa ubuqiniso balo kanye nobunikazi.

Kuzokwenzekani uma usebenzisa i-HTTPS ngaphandle isitifiketi?

Ngisho noma iwebhusayithi yakho ongawamukeli noma udlulise ukwaziswa okubucayi, kukhona izizathu ezimbalwa ezenza ungase ufune ukuba ephephile Iwebhusayithi bese usebenzisa mahhala futhi evumelekile Isitifiketi se-SSL kusizinda sakho.

Ukumelwa. SSL angathuthukisa isikhathi kuthatha ukulayisha ikhasi.

Search injini (SEO). Umgomo-Google ukuthi inthanethi kwaba ephephile futhi iphephile kubo bonke abantu, hhayi nje kulabo zisebenzisa i-Google Chrome, i-Gmail ne-Drive, isibonelo. Inkampani ithi ukuthi ukuphepha kuyoba yisici indlela lilinganise amasayithi emiphumeleni yosesho. Nakuba lokhu kunganele. Nokho, uma une kuwebhusayithi evikelekile, futhi izimbangi zakho musa, isayithi yakho ingase uthole ibencono, kungase kudingeke ukwandisa ukuthandwa kwakhe nekhasi yosesho.

Uma isayithi yakho avikelwe futhi iqoqa amaphasiwedi noma ikhadi lesikweletu, abasebenzisi-Chrome 56 (ekhishwe ngoJanuwari 2017) bazobona isixwayiso sokuthi indawo engaphephile. Izivakashi abangekho ujwayelene ubuchwepheshe, (abasebenzisi kakhulu iwebhusayithi) kungenzeka kwaphela nasozwaneni ngesikhathi ebona iwindi «isitifiketi HTTPS isiphambeko 'futhi ushiye indawo yakho, ngoba nje abaqondi ukuthi kusho. Ngakolunye uhlangothi, uma site lakho livikelekile, kungenza izivakashi kakhudlwana, okuyinto kuyokwandisa amathuba okuba ukuthi bayakufa ugcwalise ifomu lokubhalisa noma ushiye amazwana kusayithi lakho. U-Google une plan eside, ukuze ubonise bonke HTTP-amasayithi njengoba okungaphephile ku-Chrome.

Ngingalutholaphi isitifiketi HTTPS khulula?

Uthola SSL-isitifiketi ovela igunya isitifiketi. Lezi izitifiketi avumelekile izinsuku ezingu-90, kodwa kunconywa isandiso ezingu-60. Ezinye imithombo khulula:

• Cloudflare: Kumahhala amawebhusayithi akho omuntu siqu namabhulogi.
• FreeSSL: mahhala izinhlangano ezingenzi inzuzo futhi uqale-ups okwamanje; akukwazi ikhasimende Symantec, Thawte, GeoTrust futhi RapidSSL.
• StartSSL: izitifiketi avumelekile 1 kuya ku-3 iminyaka.
• GoDaddy: izitifiketi evulekile-jar amaphrojekthi, evumelekile unyaka ongu-1.

Thayipha Certificate nobuqiniso bayo incike umthombo. Ohulumeni abaningi ukunikeza ejwayelekile izitifiketi ze-SSL mahhala futhi ukukhokhiswa EV SSL izitifiketi uma abenzele. Cloudflare inikeza izinhlelo free futhi wakhokha futhi ezihlukahlukene izinketho ezengeziwe.

Yini okudingeka uyicabangele lapho ukuthola isitifiketi SSL?

Lapha, i-Google uncoma isitifiketi ngokhiye 2048-bit. Uma usunayo isitifiketi 1024-bit, okuyinto kakhudlwana, kutuswa ukuba ubuyekeze.

Uzodinga ukunquma uma usidinga, izizinda eziningi noma isitifiketi isikhethi:

1. Omunye isitifiketi isetshenziselwa nesizinda esisodwa (isib www.example.com).
2. isitifiketi Multi-domain ukuze usetshenziselwe lesizinda eziningana owaziwa (isib www.example.com, cdn.example.com, example.co.uk).
3. Isitifiketi isikhethi isetshenziswa ukuze uvikele lesizinda nge izizinda eziningi ashukumisayo (isib a.example.com, b.example.com).

Indlela ukufaka isitifiketi SSL?

ukusingathwa wakho wewebhu Ungakwazi ukufaka isitifiketi mahhala noma ngemali ethile. Ezinye Sebawoti empeleni babe isethaphu Ase Bethela inketho ku-akhawunti yakho cPanel siqu, okuyinto lula ukusebenza. Buza umninikhaya wakho wamanje noma ukuthola omunye enikeza ukwesekwa ngqo Bethela Ase. Uma umninikhaya ayinikezi le sevisi, inkampani isevisi yakho Iwebhusayithi noma unjiniyela Ungakwazi ukufaka isitifiketi ngawe. Kufanele alungele yokuthi une ukuvuselela isitifiketi kuvamile. Hlola isikhathi esibekiwe ngesitifiketi.

Yini enye ukuyenza?

Ngemva kokuthola nokufaka SSL-isitifiketi uzodinga ukuphoqelela SSL kusayithi lakho. Nalapha futhi, ungacela inkampani yakho nesevisi yewebhu impi noma umthuthukisi ukuze wenze lesi senzo. Nokho, uma ukhetha ukwenza ngokwakho, futhi indawo yakho powered by WordPress, ungenza kanjalo ngokulanda, ufaka futhi usebenzisa i-plugin. Lapho inguqulo yokugcina qiniseka hlola ukuhambisana nenguqulo yakho ye-WordPress.

Amabili i-plugin ethandwayo for SSL ophoqelelwe: SSLWP elula, ophoqelelwe SSLSSL-plugin. Qiniseka ukuthi wenze ikhophi yebhekhaphu website yakho bese qaphela kakhulu uma wenza lokhu. Uma elungiselelwe okuthile, kwakungase nemiphumela emibi: Izivakashi ngeke ukwazi ukubona indawo yakho, izithombe ababoniswa, amaskripthi kungukuthi ukulayishwa, okuyinto kuzothinta indlela ezinye izinto kusayithi lakho umsebenzi, ezifana imidwebo kanye nemibala aziboniswa kahle indlela.

Udinga ukwazi ukuqondisa kabusha abasebenzisi kanye izinjini kuya HTTPS ikhasi-usebenzisa 301 Ukuqondisa kabusha efayeleni .htaccess kufolda impande on the server. Ifayela .htaccess ifayela ongabonakali, ngakho-ke qinisekisa ukuthi igama lakho Uhlelo FTP is kusethelwe ukukhombisa amafayela ezifihliwe. Ngo FileZilla, isibonelo, iya Server> wokubuka Ephoqelekile amafayela ezifihliwe. FileZillaBefore, ngaphambi ngokungeza Ukuqondisa kabusha, kungaba umqondo omuhle ukuba isipele ifayela lakho .htaccess. On iseva ukuqamba kabusha okwesikhashana ifayela ngokususa kwesikhathi (okwenza kube ongabonakali kwasekuqaleni), ukulanda ifayela (manje ezizobonakala kukhompyutha yakho ngenxa kwesikhathi ukususwa), bese ufaka emuva kwesikhathi ukuthi iseva.

Hlela izilungiselelo ze-Google Analytics

Ngemva kokwenza lezi zinyathelo, udinga ukushintsha efiswayo URL-le-Analytics-akhawunti yakho ye ukubonisa kwesizinda sakho HTTPS-nguqulo. Uma kungenjalo, ngeke izibalo zakho traffic igasebezi ngoba inguqulo ye-HTTP-URL amakheli ubonakala inguqulo ohluke ngokuphelele isayithi isitifiketi HTTP. Usesho lwe-Google Console Console uyazicabangela HTTP kanye ne-HTTPS kanye izizinda ahlukile, ngakho ke ukwengeza i-akhawunti ye-HTTPS domain. Khumbula, uma ushintsha kusuka HTTP ukuze isitifiketi HTTPS uma site lakho has a ukufinyelela ukhiye ekhethekile, counter izohlelwa futhi.