Welcome to OStack Knowledge Sharing Community for programmer and developer-Open, Learning and Share
Ask a Question
Welcome To Ask or Share your Answers For Others

Categories

一次完整的HTTPS请求与HTTP请求有什么区别呢

0 votes
441 views
in Technique[技术] by (71.8m points)

一次完整的HTTPS请求与HTTP请求有什么区别呢

如题。面试被问到了，不知道HTTPS的加密过程是在HTTP请求的哪个阶段进行的


与恶龙缠斗过久,自身亦成为恶龙；凝视深渊过久,深渊将回以凝视…
Welcome To Ask or Share your Answers For Others

1 Answer

0 votes
by (71.8m points)

https = tcp + tls/ssl + http

简单说就是把传输层加密，把明文传输的http协议变为密文传输，在完成tcp握手与进行http传输之间，插入tls。

加密流程又与密码套件相关，不同的密码套件步骤不一样。

这是curl https://www.baidu.com的数据报文，使用的密码套件为TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256

image.png


与恶龙缠斗过久,自身亦成为恶龙；凝视深渊过久,深渊将回以凝视…
Welcome to OStack Knowledge Sharing Community for programmer and developer-Open, Learning and Share
Click Here to Ask a Question

Just Browsing Browsing

2.1m questions

2.1m answers

60 comments

56.6k users

Most popular tags

Powered by Question2Answer
Donate
Theme by Q2A Market&&OStack.cn
...