What are the pros and cons of a 100% HTTPS site?

前端 未结 7 1270
星月不相逢
星月不相逢 2020-12-30 04:12

First, let me admit that what I know about HTTPS is pretty rudimentary. I don\'t know much about session security, encryption, or how either of those things is supposed to b

7条回答
  •  無奈伤痛
    2020-12-30 04:43

    You do not need multiple copies of these files for them to work with HTTPs. You may need to have 2 copies of these files if the hosting setup has been configured in such that you have a separate https directory. So to answer your question - no duplicate files are not required for HTTPs but depending on the web hosting configuration - they may be.

    In regards to the pros and cons of https vs http there are already a few posts addressing that. HTTP vs HTTPS performance HTTPS vs HTTP speed comparison

    HTTPs only encrypts the data between the client computer and the server. It does not software holes or issues such as remote javascript includes. HTTPs doesn't make your application better - it only helps secure the data between the user and your app. You need to make sure your app has no security holes, practice filtering all data, SQL, and review security logs frequently.

    However if you're only responsible for the frontend part of the site I wouldn't worry about it but would bring up concerns of security with the main developer for the backend.

提交回复
热议问题