http vs https how ssltls encryption works with timestamps YoutubeScribe.com

[0:00] Today, you're going to learn everything
you need to know about HTTP vs. HTTPs.
[0:05] We'll talk about the difference between
these two protocols, how SSL and TLS
[0:09] encryption work, where you can get a free SSL
certificate and why you might not want to do
[0:15] that, and we'll finish things off with finding and
fixing HTTPS related issues on your website.
[0:21] Let's get started by defining HTTP.
[0:24] HTTP stands for hypertext transfer
protocol, which is basically a method
[0:29] to fetch resources such as
HTML documents and images.
[0:34] For example, when you submit a request by
entering a URL in your browser's address bar
[0:39] or by submitting a form on a page,
a request is sent from your computer
[0:43] to the website's server.
[0:44] And that data will travel through the internet
as plain text until it reaches the server where
[0:49] the website is hosted.
[0:51] The server will then send back
a response to that request and
[0:54] your browser will render, or show
that data the way it's intended.
[0:58] Now, everything seems well and good,
but the problem happens when we add
[1:02] hackers to the equation.
[1:04] Because the information is sent as
text, attackers are able to intercept
[1:09] and extract potentially sensitive information
while it travels to and from web servers.
[1:16] So that might be things like your name,
usernames, address, credit card number,
[1:21] and passwords.
[1:22] That's where HTTPS helps.
[1:25] HTTPS is basically HTTP
but with security features.
[1:30] And you can tell whether a website is
using HTTPS by looking for a lock icon
[1:35] in the address bar.
[1:37] Now, when you submit your request via.
HTTPS, that information is encrypted
[1:42] before it travels across the
internet to the web server.
[1:46] So when an attacker intercepts that
data, they won't know the details of
[1:50] your request to the web server because
the information will be scrambled.
[1:55] And they also won't know the response
that the web server sends back because
[1:58] that too is encrypted.
[2:01] HTTPS is now the main protocol for
transferring data across the web
[2:05] because it protects people's
information from being compromised.
[2:09] In fact, HTTPS is so important for
keeping web users safe that Google
[2:14] made it a ranking signal in 2014.
[2:17] And more recently, it's been categorized
under their page experience signals
[2:21] which are used for ranking web pages.
[2:24] Now, if this was tough to understand,
it may be easier to envision sending
[2:28] a package through the mail.
[2:30] When you drop off a package at the post
office, technically, anyone can open your
[2:35] package, steal the contents,
or tamper with them.
[2:40] This is like HTTP.
[2:42] Now let's rewind.
[2:44] Let's say that your package contents
are enclosed in an indestructible safe.
[2:48] Sure, people can remove the packaging,
but only the people with a key will be able
[2:53] to see what's inside the safe.
[2:55] That's like HTTPS.
[2:58] Now, the way HTTPS secures your data is
by using one of two cryptographic protocols.
[3:04] SSL or TLS.
[3:07] SSL stands for Secure Sockets Layer.
[3:10] And it helps to authenticate the identity
of a website so a secure HTTP session
[3:15] can happen between the client
and the server.
[3:18] Here's how it works in a nutshell.
[3:20] When you try to connect to a website
that's using SSL, the browser asks
[3:25] the server to identify itself.
[3:27] This process is known as authentication.
[3:30] The browser essentially says to the
server, "Hey... I'm looking for x.com.
[3:35] I think that's you but I want to be sure.
[3:37] Can you send me some proof?"
[3:39] So the server will be like, "Howdy!
[3:41] Yep, that's me and here's my
SSL certificate to prove it."
[3:45] And when both parties are happy that
everything looks legit, they'll do a virtual
[3:49] handshake and agree to send
encrypted data to one another.
[3:53] Now, TLS is the second
cryptographic protocol.
[3:57] TLS stands for Transport Layer Security
and it's actually the successor of SSL.
[4:02] It follows the same principles in
authentication and encryption and
[4:06] is today's current security standard.
[4:09] Now, if your website isn't using HTTPS, then
you'll need to get an SSL or TLS certificate.
[4:16] And while basically anyone can issue
a certificate, only publicly trusted CAs,
[4:21] or certificate authorities,
are supported by browsers.
[4:25] So let's talk about how to get a free
SSL certificate and also discuss why
[4:30] you might want to pay for one instead.
[4:32] So there are three different types
of certificates you can get.
[4:35] The first is a Domain
Validation certificate or DV.
[4:40] This is your entry-level TLS certificate
and it provides the most basic level
[4:45] of security.
[4:46] You can get one for free at
LetsEncrypt.org and follow
[4:49] their directions to install it.
[4:52] Alternatively, your web hosting company
may already have a user-friendly way
[4:56] to install an SSL with a free
service provider like Let's Encrypt.
[5:01] For example, in Siteground's Site tools,
you can install a Let's Encrypt SSL for
[5:06] your domain with just a few clicks.
[5:09] DV certificates are usually fine
for most sites, especially if you're
[5:12] running a blog, affiliate site, or
if you're a local service provider.
[5:17] Now, if you want to have more security
and better identification, then you'll have
[5:21] to look to the other two types of
certificates which are organization
[5:25] validation and extended validation
– the latter having a more rigorous
[5:30] verification process.
[5:32] You can purchase these through various
sites so shop around if you need one.
[5:36] Alright, now let's talk about handling
HTTPS issues because they are common.
[5:41] If you started your site on HTTPS,
then you shouldn't have anything
[5:45] to worry about.
[5:46] But chances are, we didn't all
start there, meaning, there could
[5:50] potentially be pages across your site
that are still using unsecure HTTP.
[5:56] In fact, even Amazon, the world's largest
Ecommerce site, has an entire subdomain
[6:02] that's still using HTTP.
[6:05] Now, there are numerous ways
to check for HTTPS issues.
[6:08] One quick thing you can do is see
if Google knows about any of your
[6:12] unsecure URLs.
[6:14] To do that, go to Google and search
for site:yourdomain.com and then
[6:19] add -inurl:https.
[6:24] If there are no results then
you're all good on this front.
[6:27] But if you're seeing results like this,
then you'll have to visit each page
[6:33] and add redirects or canonicalize as needed.
[6:36] In the case of Amazon's Development Center
for Romania, there is indeed an issue.
[6:42] Now, if we go back to the SERP
and click on another result,
[6:45] you'll see that it automatically
redirects to the secure version.
[6:48] And that's because this query
isn't about finding unsecure
[6:51] pages that are indexed in Google.
[6:54] It just means that Google knows that
these pages were once unsecure, so
[6:58] you may get some false positives.
[7:00] So to avoid wasting time, the best way
to find all HTTPS related issues is to run
[7:06] a website audit.
[7:08] And you can do that in Ahrefs
Site Audit with a paid or free
[7:11] Webmaster Tools account.
[7:13] After you've run the crawl, head over
to the "All Issues" report and you'll see
[7:17] a complete list of SEO issues we
found on your site and the number
[7:21] of affected pages.
[7:23] Now, if you do a search for HTTP, you'll
see this issue, which shows that we
[7:27] have seven pages on our site where HTTPS
pages have internal links to HTTP pages.
[7:35] Hit the caret, and you'll get details
on the issue and instructions on
[7:39] how to fix them.
[7:40] Now, to actually see which URLs are
affected, just click on the number
[7:44] beside the issue name, and you'll know
exactly where these issues occurred.
[7:49] HTTPS is the standard and as more and
more people become aware of internet
[7:54] security, you'll need to have this for
your website as the bare minimum.
[7:59] So go and do that and if you want
to learn more about search engine
[8:02] optimization, we have a full course
that'll teach you how to get more
[8:05] organic traffic to your site and keep
your site in good technical health.
[8:09] I'll see you in the next tutorial.

本文档为站内渲染。原始文件本地路径：saas/source/seo/SEO-seo方法论-youtube-seo-scripts-ahrefs-scripts-http-vs-https--f3992b.txt（仅本地保留，不入库不部署）