Jagoran A-zuwa-Z zuwa Jagoran Layer Tsare (SSL) don Kasuwancin Kasuwanci

Mataki na ashirin da ya rubuta: Timothy Shim
  • Jagoran Gida
  • An sabunta: Nov 12, 2020

Don gina dangantaka yana buƙatar amincewa kuma wannan ya fi tsanani ga ɗayan da bangarori biyu suke da shi kuma ba za su hadu ba. Amince da Intanet yana daya daga muhimman mahimmanci, musamman ma idan wannan dangantaka ta kasance ma'amala; inda kudi yake. Ko da zurfi fiye da wannan shi ne gaskiyar cewa Data ne sabon zinariya, don haka kusan duk abin da muke yi a kan yanar gizo ya kamata mu kasance amintacce.

Don gina wannan dangantaka ta dogara ba abu mai sauƙi ba, amma an kara matsa lamba masu shafukan intanet don ƙirƙirar yanayi wanda zai ba masu amfani damar jin dadi. Takaddun shaida na SSL shine maɓalli guda ɗaya na yin haka, tun da sun tabbatar masu amfani da cewa haɗin da suke da shi zuwa wannan shafin yanar gizo yana da lafiya.

Don mai amfani, duk abin da suke buƙatar tabbatar da wannan ita ce mai sauki mai nunawa a kan mai bincike. Don masu mallakar yanar gizon, yana da ɗan ƙaramin rikici, amma ba dole ba ne.

Table of Content

Har ila yau karanta - Inda zan sayi takaddun shaidar SSL

Mene ne Layer Layer Layer (SSL)?

SSL ita ce yarjejeniya ta tsaro wadda ta tabbatar masu amfani da cewa haɗin tsakanin kwamfuta da shafin da suke ziyartar amintacce ne. A yayin haɗi, ƙididdigar bayanai ta wuce tsakanin kwakwalwa biyu, ciki har da abin da zai iya zama ainihin bayanin sirri irin su lambobin katin bashi, lambobin mai amfani ko ma kalmomin shiga.

A karkashin yanayi na al'ada, ana aika wannan bayanan a cikin rubutu mai mahimmanci, wanda ke nufin cewa idan haɗin haɗuwa ya kasance ta hanyar wani ɓangare na uku, ana iya sace bayanai. SSL ya hana wannan ta hanyar yin amfani da wani ɓoyayyen ɓoyewa wanda za a yi amfani da ita a lokacin haɗin kan iyakokin biyu.

Ƙaƙwalwar ƙira, ko icon icon na kore ya zama alamar tabbacin ga masu amfani da shafin yanar gizon da suke ziyartar yana daukar tsaro sosai.

Nuna SSL a kan masu bincike daban-daban.
Nuna SSL a kan masu bincike daban-daban.

Me yasa muke buƙatar SSL Certificate?

Asali tambayar gama gari da za'a yi itace "Shin muna bukatar takardar shaidar SSL".

Kuma amsar ita ce 'shi ya dogara'. Bayan haka, me ya sa yanar gizo da ba su buƙatar ɗaukar bayanan kudi masu la'akari suna bukatar su kasance lafiya?

Abin baƙin ciki, kamar yadda aka ambata a baya, shekarun dijital na nufin cewa ba tare da tsabar kudi ba, masu karfin zamani a yau sun fara farawa bayan bayanan sirri.

Google Factor

Ganin wannan, fara Yuli 2018, Google za ta lakafta dukkan shafuka na HTTP kamar yadda ba a amince ba. Wannan yana da mahimmanci a gane, domin yana nufin cewa shafukan da aka sani da cewa Google ba zai iya amincewa da shi ba zai iya shawo kan sakamakon layin binciken. Shafukan yanar gizo sun inganta a kan zirga-zirga kuma idan ba ka nunawa a kan jerin sunayen Google ba, to, ba za ka sami yawa a cikin shafukan yanar gizon ba.

Tips daga pro

Idan akwai haɓakawar ingantacciyar hanya, ba ta da kyau. Duk da haka, samun ciwon SSL har yanzu yana da mahimmanci.

Alamar amana ce kuma tana kawar da yuwuwar bayyanar Chrome 'ba amintacce' akan rukunin yanar gizonku ba. Kuma yayin da fa'idodin darajar kai tsaye na iya zama kaɗan a wannan lokacin, yana yiwuwa su iya zama masu mahimmanci a nan gaba.

Da farko na fara kashe ni zuwa SSL. Na ji labarai da yawa na tsoro game da hanci hanci da ruwa ba da murmurewa. An yi sa'a wannan ba lamari ba ne. Traffic tsoma dan kadan na kusan mako guda, sannan ya dawo.

- Adam Connell, Wizard Blogging

Bisa ga Shafin Farko na Google na Google, kamar yadda aka fara 2018, an kare 68% na zirga-zirgar Chrome a duka Android da Windows kuma 81 daga cikin shafukan 100 a kan yanar gizo suna amfani da HTTPS ta hanyar tsoho.

Hanyar HTTPS ta hanyar Google Chrome a kan dandamali daban-daban.
Kashi na shafi na haraji a kan HTTPS a Chrome ta hanyar dandamali. An kare 64% na zirga-zirgar Chrome a Android. Sama da 75% na Chrome a kan duka ChromeOS da Mac an kare yanzu. Dukkanin Figures uku suna nuna haɓaka mai girma da aka kwatanta da shekara guda da suka gabata.

A yanzu, bazai buƙatar takaddun shaida na SSL ba tukuna, amma yana iya zama mai hikima don yin la'akari da la'akari da aiwatar da ɗaya. Kodayake a wannan wuri ne kawai Google ke ba da gargadi da kuma tabbatar da matsayin martaba, ya ba da yanayin tsaro a yau, watakila ba zai tsaya a can ba.

Har ila yau karanta: Jagorar SEO don sababbin sababbin abubuwa

Ta yaya SSL Works

A taƙaice magana, akwai abubuwa uku da suka dace a ƙirƙirar haɗi;

  1. Abokin ciniki - Wannan shi ne kwamfutar da ke neman bayani.
  2. Server - Kwamfuta wanda ke riƙe da bayanin da ake buƙata ta Abokin ciniki.
  3. The Connection - Hanyar tare da bayanai ke tafiya tsakanin abokin ciniki da uwar garke.
Yadda SSL ke aiki - bambancin tsakanin HTTP da HTTPS.
HTTP vs HTTPS dangane (Source: Sucuri)

Don kafa kafaffen haɗi tare da SSL, akwai wasu kalmomin da ka buƙaci ka sani.

  • Certificate shiga Request (CSR) - Wannan yana ƙirƙira makullin biyu a kan uwar garke, ɗaya mai zaman kansa da kuma jama'a ɗaya. Maɓallan maɓallin biyu suna aiki tare don taimakawa wajen kafa haɗin haɗin.
  • Gudanar da Certificate (CA) - Wannan shi ne mai bayarwa na takaddun shaidar SSL. Kayan kama da kamfani mai tsaro da ke riƙe da bayanan yanar gizon yanar gizo.

Da zarar haɗi yana nema, uwar garken zai ƙirƙiri CSR. Wannan aikin ya aika da bayanai wanda ya haɗa da maɓallin jama'a ga CA. Bayanan na DNA ya haifar da tsarin bayanai wanda ya dace da maɓallin keɓaɓɓen.

Mafi mahimmancin ɓangare na SSL Certificate shi ne cewa an sanya hannu a lamba ta hanyar Ca. Wannan yana da mahimmanci saboda masu bincike kawai sun dogara da SSL Takaddun shaida sanya hannu ta hanyar takamaiman jerin Hannun kamfanoni irin su VeriSign or DigiCert. Jerin CAs an tantance su sosai kuma dole ne ya bi ƙa'idodin tsaro da amincin da masu bincike suka saita.

Irin SSL Takaddun shaida

Masu bincike suna gano SSL Takaddun shaida (EV Ana nuna shaidar a cikin wannan hoton) kuma kunna ingantaccen haɓaka tsaro.

Ko da yake duk takaddun shaidar SSL an tsara su don wannan dalili, ba duka suna daidai ba. Ka yi la'akari da shi kamar sayen waya. Ana amfani da dukkan wayoyin hannu don yin daidai da wancan, amma akwai kamfanoni daban daban da suka kirkiro su kuma suna samar da samfurori daban daban a wurare dabam dabam.

Don sauƙaƙe da batutuwan, zamu karya takaddun shaidar SSL ta hanyar amincewa.

Takardar shaidar 1- Domain (DV) Certificate 

Daga cikin Takaddun shaida na SSL, Shaidun da aka Amince da Shari'ar ita ce mafi mahimmanci kuma kawai yana tabbatar da masu amfani cewa shafin yana da lafiya. Babu cikakkun bayanai banda wannan hujja mai sauki kuma kungiyoyin tsaro ba su bayar da shawarar yin amfani da Takaddun shaida na Shafin yanar gizo don shafukan intanet da ke hulɗar kasuwanci. Shafin Farfesa na Domain shine kasafin kuɗi na SSL na duniya.

2- Ƙungiyar Tabbacin Shaidar (OV)

Ƙungiyoyin Takaddun shaida na Ƙungiyar Takaddun shaida sun fi dacewa da vetted ta CA fiye da masu amfani da takardun shaida na Domain. A gaskiya ma, waɗanda ke da waɗannan takardun shaida suna tabbatar da su ta hanyar kwararrun ma'aikatan da ke tabbatar da su ga masu rajista. OV Takaddun shaida sun ƙunshi bayani game da kasuwancin da ke riƙe da su kuma ana amfani da su a kan shafukan yanar gizo kuma suna wakiltar wasu wayoyin hannu na SSL duniya.

3- Tabbatar da Extended Validation (EV) Certificate

Nuna wakilci mafi girma na amincewa a cikin martaba na SSL, EV Takaddun shaida ana amfani da su ta mafi kyawun mafi kyawun gaske. Ta hanyar yin amfani da Takaddun shaida na EV, waɗannan shafukan yanar gizo suna sayen ƙwaƙwalwa ga masu dogara. Waɗannan su ne iPhoneX na SSL duniya.

Gaskiyar cewa SSL Certification ya zama haka sosai shawarar a yau, mutane da yawa zamba yanar sun kuma dauka ta yin amfani da SSL. Bayan haka, akwai ɗan bambanci ga shafukan intanet, sai dai don takaddun shaida na kore. Wannan shi ne dalilin da ya sa wasu kungiyoyi masu daraja suna zuwa don takaddun shaida na SSL wadanda suka fi dacewa.

Tun da duk wani haɗin SSL wanda ke ci gaba ya sa alamar padlock ya bayyana, masu amfani bazai iya sanin ko mai amfani da shafin yanar gizon ya bace ko a'a. A sakamakon haka, fraudsters (ciki har da shafukan yanar gizo na asali) sun fara amfani da SSL don ƙara fahimta ga yanar gizo. - wikipedia.

Inda zaka Samu SSL Takaddun shaida?

Don samun takardar shaidar SSL, kuna buƙatar zuwa Takaddun Shaida (CA).

Masu lasisi (CA) kamar kamfanonin tsaro ne masu zaman kansu. Su ne waɗanda ke ba da takaddun dijital waɗanda ke sauƙaƙe tsarin kafa SSL. Hakanan suna cikin iyakantattun jerin kasuwancin da suka cika cikakkun sharuɗɗa don kiyaye matsayin su akan wannan jeren. CAs waɗanda ke kula da wuraren su a cikin wannan jerin na iya ba da Takaddun Takaddun SSL - don haka jeri ne na musamman.

Shirin ba shi da sauki kamar sauti, tun kafin a iya ba da takardar shaidar, dole ne CA ta bincika ainihin shafin yanar gizon yana amfani da shi. Matsayin daki-daki a cikin waɗannan ƙwanan yana dogara ne akan irin nau'in SSL ana amfani dashi.

Menene ke sanya Hukumar Tattalin Arziki (CA) girma?

Mafi kyawun CA shi ne wanda ya kasance a cikin kasuwancin har zuwa wani lokaci kuma ya bi mafi kyawun ayyuka a kasuwanni, ba kawai don kansa ba, har ma ga kowane abokan tarayya da ke cikin kasuwancin. Ainihin, ya kamata su iya nuna irin kwarewa a filin.

Bincika CA wadda ta tsaya har zuwa halin yanzu, yana da hannu a cikin masana'antar tsaro kuma tana da albarkatun da za su iya taimaka wa abokan ciniki.

Kyakkyawan CA zai kuma:

  • Shin kwanciyar lokacin ƙayyadadden lokaci na gaskiya
  • Kasancewa sauƙi ga abokan ciniki
  • Shin babban goyon baya

Sanarwar Hukumomin Takaddun shaida

NameCheap yana ba da cikakkun takaddun takaddun SSL don haka za ku sami wani abu a can komai bukatun ku ko kasafin ku. Takaddun shaida na Tabbacin Tabbacin Tabbacin farawa daga $ 8.88 a kowace shekara, amma akwai kuma takaddun shaida masu mahimmanci waɗanda ke zuwa $ 169 kowace shekara (Ziyarci Online).

SSL.com da kuma NameCheap sune wuraren tafiye-tafiye lokacin da nake buƙatar siyan takaddun shaidar SSL. A madadin - bincika wannan jerin Mafi kyawun masu ba da takardar shaidar SSL.

SSL kyauta daga Bari mu Encrypt

Ga wadanda daga cikinku waɗanda ke gudana na sirri ko abubuwan sha'awa, ko kuma duk abin da ba'a sayar da shi ba, akwai wani abu wanda ba shi da kyau ga Google.

Bari mu Encrypt ne amintacce CA wanda yake budewa kuma kyauta don amfani (). Abin takaici, kawai yana da alaƙa da takaddun shaida- ko takaddun shaida na DNS ba tare da wani shiri don mika wannan zuwa OV ko EV ba. Wannan yana nufin cewa takaddun shaida za su iya tabbatar da mallaki amma ba kamfani ba. Idan kun kasance wata kasuwar kasuwanci, wannan shine babban buri.

Bari mu Encrypt an riga an saita shi a wasu kamfanoni masu tallatawa (misali - GreenGeeks). Idan kuna shirin tafiya tare da Bari mu Encrypt Free SSL, zai fi kyau ku karɓi bakuncin tare da ɗayan waɗannan rukunin rukunin yanar gizon.

Karatu mai ban sha'awa: Sake duba GreenGeeks

GreenGeeks yana ba da kyauta Bari mu Encrypt SSL kuma yana ba da mai sakawa mai sauƙin amfani akan dashboard ɗin mai amfani.

Yadda za a Shigar SSL Certificate

SSL Shigarwa don cPanel

Hanyar:

  1. A karkashin 'Tsaro' zažužžukan, danna kan 'SSL / TLS Manager'
  2. A karkashin 'Shigar da Sarrafa SSL', zaɓi 'Sarrafa SSL Sites'
  3. Kwafa lambar takardar sheda ɗinka tare da —–FARA CERTIFICATE—– da —–END CERTIFICATE—– ka liƙa a filin “Takaddun shaida: (CRT)”.
  4. Danna 'Autofill by Certificate'
  5. Kwafi da manna jerin takardun shaida na matsakaici (CA Bundle) a cikin akwati ƙarƙashin Ƙarin Shafin Farko (CABUNDLE)
  6. Click 'Shigar da Takaddun shaida'

* Lura: Idan ba a yi amfani da adireshin IP ɗin da aka keɓe ba dole ne ka zaɓa daya daga cikin adireshin IP Address.

SSL Installation for Plesk

Hanyar:

  1. Je zuwa shafin yanar gizon yanar gizo & Shafuka kuma zabi yankin da kake son sanya takardar shedar.
  2. Danna 'Sanya Shafukanku'
  3. A karkashin sashin 'Shigar da Fayilolin Fayiloli', danna 'Browse' kuma zaɓi takardar shaidar da fayilolin caji na dole.
  4. Danna 'Aika Fayiloli'
  5. Koma baya ga 'Yanar Gizo & Shafuka' sannan danna '' Saitunan kwana '' domin yankin da kake girka takardar shedar.
  6. A karkashin 'Tsaro', ya kamata a sami menu mai sauƙi don ku zaɓi takardar shaidar.
  7. Tabbatar da akwatin nema na 'SSL Support'.
  8. Tabbatar danna 'Ok' don adana canje-canje

Don inganta idan shigarwarku ya ci nasara, zaka iya amfani da wannan free SSL validation kayan aiki.

Ɗaukaka haɗin yanar gizonku ta intanet

Idan ka bincika hanyoyin haɗin gidan yanar gizon ka zaka lura cewa duk suna amfani da HTTP. Babu shakka waɗannan suna buƙatar sabuntawa zuwa haɗin HTTPS. Yanzu a cikin wasu 'yan matakai zamu nuna muku hanyar yin hakan a duk duniya ta amfani da dabarun juyawa.

Duk da haka, aikin mafi kyau shine don sabunta hanyoyinku na ciki daga HTTP zuwa HTTPS.

Idan ka sami wani shafin yanar gizon kawai tare da wasu shafukan da bai dace ba. Duk da haka idan kana da daruruwan shafukan yanar gizo zai ɗauki shekaru da yawa don haka kuna so ya fi kyau ta amfani da kayan aiki don sarrafa wannan don ajiye lokaci. Idan shafin yanar gizon ya gudana a kan bayanai, yi bincika bayanai da maye gurbin yin amfani da wannan rubutun kyauta.

Ɗaukaka hanyoyin da ke nuna shafinku

Da zarar ka canza zuwa HTTPS idan kana da shafukan yanar gizo na waje wanda ke danganta da kai, za su nuna zuwa ga HTTP version. Za mu kafa wani canji a wasu matakai kaɗan, amma idan akwai wasu shafukan yanar gizo na waje waɗanda kake sarrafa bayaninka sannan zaka iya sabunta URL don nunawa zuwa cikin HTTPS.

Misalai masu kyau na waɗannan za su zama bayanin bayanan kafofin watsa labarun da kuma duk jerin labarun inda kake da shafin yanar gizon shafi wanda ke ƙarƙashin ikonka.

Karatu mai ban sha'awa: Inda zaka dauki bakuncin kananan gidajen yanar sadarwar ka

Sanya Jagorar 301

Yayi kan fasaha na fasaha kuma idan baku da tabbaci tare da irin wannan abu to to yana da lokaci don samun taimako na gwani. Yana da kyau sosai kuma bai dauki lokaci mai tsawo a gaskiya ba, amma kana bukatar ka san abin da kake yi.

Tare da Canza 301 abinda kake yi yana fadawa Google cewa wani shafi na dindindin ya koma wani adireshin. A wannan yanayin zaku gaya wa Google cewa duk wani shafin HTTP akan rukunin yanar gizonku yanzu HTTPS ne don haka yana tura Google zuwa daidai shafuka.

Ga yawancin mutanen da ke amfani da gidan yanar gizon Linux wannan za a yi ta fayil ɗin .htaccess (duba lambar da ke ƙasa - kamar yadda rahoton Apache yake).

 ServerName www.example.com Gyara "/" "https://www.example.com/"

Ɗaukaka CDN ɗinku na CDN

Wannan shi ne ainihin mataki na zaɓi saboda ba kowa yana amfani da CDN ba. CDN tana nufin Network Delivery Network kuma yana da jerin tsararren asusun da aka rarraba wanda ke adana ɗakunan fayilolin yanar gizonku kuma suna gabatar da su zuwa ga baƙi daga wata uwar garken geographically don inganta gudun da ya ɗauka a gare su.

Har ila yau, gyare-gyaren haɓaka, CDN na iya bayar da tsaro mafi kyau saboda sabobin sa na iya saka idanu da kuma gane hanyoyin cin moriya da kuma dakatar da shi zuwa shafin yanar gizonku.

Misali na CDN mai mahimmanci shine Cloudflare.

Ko ta yaya, kawai tambayar kamfaninka na kamfanin idan kana amfani da CDN. Idan baku da lafiya, kawai matsa zuwa mataki na gaba.

Idan kun kasance kuna buƙatar tuntuɓar CDN kuma ku tambaye su don umarnin don sabunta your SSL don su tsarin CDN su gane shi.

Common SSL takardar shaidar kurakurai da kuma sauri mafita

1. Ba a amince da Takaddun shaidar SSL

Kusan dukkan masu bincike a amfani da yawa kamar su Chrome, Microsoft Edge, Mozilla Firefox, Da kuma Apple safari sun gina a wuraren ajiyar da ake amfani dashi don gane SSL takaddun shaida.

Idan kana samun sakon da yake cewa wani shafin yana da takardar shaidar wanda ba'a amincewa, yi hankali sosai saboda wannan yana iya nufin cewa takardar shaidar ba ta sanya hannu ba ta CA.

2. Matsakaici SSL Certificate bace

Wannan kuskure ne sau da yawa ya sa ta hanyar shigar SSL Certificate kuskure. Kurakurai a lokacin shigarwa na iya haifar da wasu kurakuran haɗin SSL. Ya kamata a sami 'sashin amincewa'ma'anar cewa duk abubuwan da ake bukata a cikin yarjejeniyar saiti ya kamata su gudu.

Idan kun kasance mai masaukin yanar gizo da kuma fuskantar wannan kuskure, gwadawa game da ɓangaren da na rufe 'Shigarwa SSL'.

3. Matsaloli tare da Takaddun Takaddun shaida

To circumvent SSL al'amurran da suka shafi, wasu website owners ƙirƙirar kansu SSL Takaddun shaida. Wannan shi ne mai yiwuwa, amma kada ku yi yawa na bambanci tun da ba za a sanya hannu ta hanyar dogara CA. Lokaci ne kawai da takaddun takaddun takaddun da ake amfani da su ana iya amfani dasu a cikin gwaji ko ci gaban yanayin. Shafuka tare da takaddun shaida takaddun shaida ba za a nuna su a matsayin amintacce ba.

4. Cikakken Kuskuren Abun Cikin 

Wannan matsalar matsala. Don SSL Takaddun shaida suyi aiki, kowane ɗayan shafi da fayil a shafinku ya kamata a haɗa HTTPS. Wannan ya hada da shafuka ba kawai, amma har da hotuna da takardu. Idan guda ɗaya ba shafi HTTPS ba, shafin zai sadu da kuskuren abun ciki da aka koma zuwa HTTP.

Don kauce wa waɗannan matsalolin, tabbatar da an sabunta hanyoyinku tare da hanyoyin HTTPS.

Kammalawa

A ƙarshen rana, SSL Takaddun shaida sune lamarin nasara. Haka ne, ƙila manyan kamfanoni kamar na Google za su iya tilasta mana, amma akwai sosai kadan.

Don karamin farashi, za ka iya tabbatar da abokan ciniki game da tsaro da bayanai da kuma sirri. Abokan ciniki a gefe guda, za su iya sake samun bangaskiya ga fasaha na zamani, filin da ya sa masu haɗari, Spammers da sauran Cybercriminals suka ƙara damuwa.

eCommerce yana daya daga cikin ginshiƙan ginshiƙai zuwa ga tattalin arziki na dijital kuma ya taimaka wajen inganta cinikayyar kan iyaka a yanzu fiye da kowane lokaci. Ta hanyar ajiye bayanai mai aminci da amintacce, kamar yadda masu shafukan yanar gizon zasu iya taimakawa kai tsaye ga tsaro na Intanit.

A ƙarshe, lokacin zabar SSL ɗinka, yi ƙoƙarin kaucewa kawai idon ido a kan farashi kuma kuyi mafi kyau don dawowa zuwa kalma mai sauƙi lokacin da kake jin dadi ko rikice; Amincewa.

Lokacin da kuka shirya: Mafi kyawun rukunin yanar gizo don siyan takaddun shaidar SSL masu arha


Rarraba Ƙaddamarwa

WHSR karɓar takardun kuɗi daga kamfanonin da aka ambata a wannan shafin. Ra'ayoyinmu suna dogara ne akan ainihin kwarewa da ainihin bayanan uwar garke. Da fatan a karanta shafukan mu na manufofin bincikenmu don fahimtar yadda tsarin bita da tsarin tsarin mu na aiki.

Game da Timothawus Shim

Timothy Shim shine marubuta, editan, da kuma kayan gwanon kwamfuta. Tun da farko ya fara aikinsa a fannin fasaha na Fasahar Watsa Labarun, ya sami hanzari a cikin rubutun kuma ya yi aiki tare da ƙasashen duniya, na yanki da na gida da suka hada da ComputerWorld, PC.com, Business Today, da kuma Bankin Asiya. Gwaninta yana samuwa a fannin fasaha daga mabukaci da kuma ra'ayoyin kasuwancin.