Today, I will share some insights on networks and protocols, particularly when dealing with projects. If a project is deployed using the HTTPS protocol, how can we call HTTP interfaces from the frontend? Conversely, if a project is deployed using the HTTP protocol, how can we call HTTPS interfaces from a webpage?For example, when accessing … Read more
Introduction In daily projects, we often encounter the integration of third-party systems, and HTTP requests are a common method of integration. This article provides a brief introduction and usage. Core Concepts of HTTP/HTTPS 1. Basics of HTTP Protocol Definition: HyperText Transfer Protocol (HTTP), used for communication between clients and servers.Core Features: • Stateless Protocol: Each … Read more
The Spring team has open-sourced the nohttp project to find, replace, and block the use of http://. The project aims to avoid using http:// whenever possible in favor of https://, ensuring that man-in-the-middle attacks do not occur. ROB WINCH, the project lead for Spring Security, Session, and LDAP, pointed out that the Spring team is … Read more
Architect (JiaGouX)We are all architects!Will you join us in shaping the future of architecture? The Spring team has open-sourced the nohttp project to find, replace, and block the use of http://. The project aims to avoid using http:// when https:// is available, ensuring that man-in-the-middle attacks do not occur. ROB WINCH, the lead for Spring … Read more
✦ ✦ ✦ ✦ ✦ ✦ ✦ ✦ As a programmer who frequently interacts with the web, understanding these protocols is essential. This article will introduce the differences and basic concepts of these protocols. It may not be limited to frontend knowledge but also includes some operational and protocol-related knowledge, hoping to provide readers with … Read more
More than 430 friends have joined Er Ge’s programming community. If you also need a good learning environment, click the link to join our big family! This is a private group for Java learning guides + practical programming + LeetCode problem-solving, where you can ask Er Ge questions, get help in creating a learning plan, … Read more
HTTP Identification Control HTTPS Identification Control Custom Identification Control Background: During work hoursIT cannot access video websites Background Analysis:HTTP message, which field identifies the URL? Blocking HTTP websites, should the three-way handshake be allowed first? HTTP Identification Working Principle: HTTP website identification, after the terminal device resolves the domain name through DNS, completes the three-way … Read more
Previously, the backend team configured HTTPS and directly provided us with the certificate. Today, I will walk through the HTTPS configuration process myself to document the steps. Apache HTTPS configuration steps 1. Check if the mod_ssl.so file is installed yum -y install openssl openssl-devel mod_ssl If it is already installed, you will see a prompt … Read more
Recently, while deploying a personal project, I encountered something I thought I understood. I originally just wanted to add HTTPS to the frontend to allow the camera permission to pop up normally, but after making the change, all requests from the frontend page failed, and the console was filled with errors. Eventually, I discovered that … Read more
The following is a classification and organization of vulnerabilities in the HTTP/HTTPS protocols based on the perspectives of black box testing、white box testing and gray box testing: 1. Black Box Testing (External Perspective, No Internal Access) Definition: Simulates the attacker’s perspective, testing only through external network interfaces without relying on internal system code or configuration … Read more