Jump to...
redirecting...

Log for 電訊台

想問https果d cert有冇分邊d 安全D
nope
安全D in which context?
有冇容量睇到個request入面d野
wireshark
charles
OP
我意思係用左https冇咁易比hacker睇到個request入面d野
Let's encript d免費cert會唔會渣d
No
Encryption is handled by server-client not the cert itself
你唔俾人hack 主機基本上冇分別
sha256
點d人為咩比錢買cert?
Root CA
me:
因為每個人都可以self sign,但係比錢係等於叫公證行出
agger
舉例:同Google買 = Google證明你係個domain owner
背書咁解
你好串
[sticker](media:AAQCABNfgVkqAAT-l09kzZivgi08AAIC@telegram)
冇 🤔
我都可以自己sign cert,但係同verisign之類cert provider買,人地會要求你證明自己先
變相係一張廢紙vs一張有人背書既cert
如果你要出街,咁係焗你買人cert
如果你圍內用,用self sign就得
Chrome will disable auto fill if you are using self-sign
LE is the new self sign
🤔
如果cert provider得果幾間, 佢地咪可以控制價格?
Yes
Verisign,鳩爸爸之類
所以SSL cert之前好貴
同埋有限期
[photo](media:AgADBQADkagxG6aqAAFWra6rTP8oroBDXPYyAATFclkvtM3ec2GEAAIC@telegram)
而加都好貴
美國佬真係識cap水
EV Cert sin expensive
[photo](media:AgADBQADOKgxG8HLAVYWypGicU1ZfMVr3jIABJlQDzJhYmGKhhECAAEC@telegram)
[photo](media:AgADBQADOagxG8HLAVbkoLQ_YzdHAZBm3jIABAxSWcy0ZiwzmxACAAEC@telegram)
[photo](media:AgADBQADlKgxG6aqAAFW8iOsGSz2ohaR5N8yAAR5h8LvTzG40jauAAIC@telegram)
雖然SSL Cert呢家野無本生利
[photo](media:AgADBQADzqgxG-MRAAFWRWmb6g4AATFUrFT2MgAECEZ9OaP_fmH6hQACAg@telegram)
want free then Let's Encrypt lor
what is the trouble to use Let's encrypt?
Have certbot = ok
其實都唔想個url bar寫住不安全姐
CNNIC SSL 咪得囉
Let's encrypt
https://www.sslforfree.com/ you can convert let's encrypt to key/crt
Rhz
but
i still prefer you use Certbot
certbot won't have your private key
so it;s safer
and it will auto renew your cert
Ok
if you have agentcc's plesk
plesk have let's encrypt OoTB
agree
其實你地會去邊接freelance?
Hellotoby果d一定改req 改到傻
i want to know too
原來Proxmox無得玩Import export
VMWare人性化D
雖然free tier得8個VM
Agent CC , 今日去左邊