Msaada: Maana na kazi za HTTP vs HTTPS

[Tiger]

Umeambiwa the heart of websites its html. So huwezi kufanya css kama hujui html. Kwanza elewa architecture of the web, elewa diffetent technologies na kazi zake. Hakikisha kwanza una general understanding "the big picture" then uanze kujifunza vipande vidogo vidogo.

mkuu, unge-summarise basi angalau nijue hiyo big picture ni ipi na hizo different techologies ni zipi ili nizifanyie kazi coz najua zipo approaches mbali mbali za kusoma hiyo kitu na ndiyo hasa nilichotaka kusikia toka kwenu.

 

[Cyclone]

HTML/XHTML and now HTML5 works together with CSS, however they do different stuffs on a webpage, HTML is all about contents & CSS is about presentations i.e how those contents will behaves on display.

A very simple understanding of how the works together follows,
Consider HTML as bricks ,CSS as color and a website/web page as a house you are about to build.
With just bricks you can build a house , however a house stands out with paints on it.

Understand how to use bricks first,& paint later when a house is ready for it, hope this helps:hand:

Nimejitahidi kusoma HTML/XHTMLfrom the begining, leo nime malizia frames ila naona wengi wanaidharau kidogo HTML, wanasema it's poor tool. Natarajia kuanza CSS kesho. What do think.

 

[N series]

HTTPS ni HTTP Secure, hii inafanya mawasiliano kwa kutumia encryption, yaani inavurugua wamasiliano ili kama kuna mtu anajaribu kuyasoma mawasiliano kati ya wewe na hiyo website atashindwa. Tofauti na HTTP ambayo ni plain text yaani mtu akifanikiwa kuingia katika line ya mawasiliano kati ya wewe na website anaweza kusoma data zote.

Kuweka HTTPS kunatumia resources za server (encryption/decryption zinakula CPU) ndo maana mara nyingi HTTPS inatumika katika page za login tu kuzuia mtu kuinyaka password ya mtumiaji. Ila kuna daadhi ya kampuni kama Google zimeanza kutumia HTTPS kila sehemu.

hapo hapo kwenye hii lifti wadau,kupitia hii topic nimepata swali hapa mkuu, sasa kama maswala yenyewe kuna ishu za HTTP Secure?? Inakua vipi pale watu wana "haijack" accounts??? sijui spelling ndio hivyo??

 

[Kang]

hapo hapo kwenye hii lifti wadau,kupitia hii topic nimepata swali hapa mkuu, sasa kama maswala yenyewe kuna ishu za HTTP Secure?? Inakua vipi pale watu wana "haijack" accounts??? sijui spelling ndio hivyo??

HTTPS inalinda mawasiliano tu kati ya browser na server, hailindi mtu kuotea password yako, hailindi keyloggers, haizuii uwezekano wa website kuwa hacked etc

 

[Richard]

Wadau, nini maana ya HTTP na HTTPS ambayo yanajiandika kwenye address bar pindi unapofungua website,maana kila nnapofungua account yangu ya facebook na gmail huwa inaandika HTTPS lkn nnapofungua website nyingine inandika HTTP,

Mkuu,

Kuna baadhi ya wenzangu wameelezea namna ya protocol hizi zinavyofanza kazi na mimi naongezea kidogo kwa faida ya wote.

HTTP au inatumia URL au universial resource locator kwenda kwenye website yoyote ile bila kupingwa na kwa kutumia port namba 80 ambayo ipo defined kama default port. Kuna port 0 mpaka 1024 katika programming kwenye masuala haya ya kwenda kwenye internet lakini port namba 80 ndio inatumiwa na websites na computer zote (TCP/IP) kwa matumizi ya kawaida.

Kwenye OSI au open system interconnection ina layer ambazo ndio zinaunda mfumo wa mawasiliano wa computer na internet na layer mojawapo ni ile inayoitwa Transport ambayo inatumia TCP au transmission control protocol ambayo imo kwenye kundi zima la internet protocol suite.

Sasa HTTPS inatumia layer inayoitwa secure socket layer kwenye matumizi ya kawaida ya HTTP ikiwa inafanya encription na decription kwa mtu anaetuma requests kwenye web server. Matumizi ya HTTPS yanazuia interception za aina yoyote ile kama vile hackers au wataalam wa eavesdropping na kadhalika.

HTTPS inatumia port namba 443 kufanya mawasiliano na labda kama port ingine imekuwa specified ni port hii ndio inatumika.

Kwa mfano ukiwa unataka kununua kitu kwenye catalogue online ukituma order kwenda kwenye web page inakwenda na URL ikianzia na https:// ile browser yenye layer ya https ina-encrypt page yako na inaituma kwenda kwenye website husika. Baada ya kuona website itatuma back kwako page inayoonyesha confirmed payment pia page hiyo ikiwa encypted na yenye https:// url na browser yako inadecrypt page hiyo na wewe kuisoma.

Kwahio websites nyingi siku hizi wanajaribu kutumia layer hii ya ziada kwa sababu za kiusalama kwa computer zao na server.

Hivyo basi huna haja ya kuwa na wasiwasi sana ukiwa mtumiaji provided una computer yenye up-todate browser na unapokwenda online ni panapoeleweka nikimaanisha server yenye software ambayo ipo up-todate.

Nafikiri nimechangia vya kutosha.

 

[Chamoto]

Ngoja niandike kwa urahisi
http ni protocol inayotumika kuwezesha mawasiliano kati ya browser(internet browser,mozilla n.k) na web server kwa kutumia port namba 80

Mawasiliano ya http/https siyo lazima yawe kati ya browser na webserver inaweza hata kuwa kati ya webbot na computer yeyote. Pia siyo lazima iwe port 80 inaweza hata kuwa port 20 hii inategemeana na jinsi ulivyo configure server yako.
Mfano nii php curl code inaweza kurender pages sawa sawa na browser.

   $proxy = '';
   $ref = '';
   $post_data ='';
   $cookie_file_path = "./cookie.txt";
   $agent = 'bot';
   $target = 'http://jamiiforums.com';

   $header = array ('Accept: text/javascript, text/html, application/xml, text/xml, */*','Accept-Language: en-us,en;q=0.5','Accept-Encoding: gzip, deflate','Connection: keep-alive', 'Content-Type: application/x-www-form-urlencoded; charset=UTF-8', 'Pragma: no-cache', 'Cache-Control: no-cache', 'Content-Length: '.strlen($post_data));


         $ch = curl_init();

     curl_setopt($ch, CURLOPT_URL, $target);
     curl_setopt($ch, CURLOPT_HEADER,1); 
     curl_setopt($ch, CURLOPT_REFERER, $ref);
     curl_setopt($ch, CURLOPT_NOBODY, FALSE);

     curl_setopt($ch, CURLOPT_RETURNTRANSFER, TRUE);
     curl_setopt($ch, CURLOPT_COOKIEJAR, $cookie_file_path);
     curl_setopt($ch, CURLOPT_COOKIEFILE, $cookie_file_path);
     curl_setopt($ch, CURLOPT_USERAGENT, $agent);
         curl_setopt($ch, CURLOPT_CONNECTTIMEOUT, 260);
         curl_setopt($ch, CURLOPT_TIMEOUT, 250);

     if($proxy){
         curl_setopt($ch, CURLOPT_PROXY,$proxy);
     }

     if($post_data == TRUE){
     curl_setopt($cURL,CURLOPT_HTTPHEADER, $header);
     curl_setopt($ch, CURLOPT_POST, TRUE);
     curl_setopt($ch, CURLOPT_POSTFIELDS, $post_data);
     }
     curl_setopt($ch, CURLOPT_FOLLOWLOCATION, TRUE);
     curl_setopt($ch, CURLOPT_MAXREDIRS, 4);

      if(preg_match ("/\bhttps:/", $target ) ) {
         curl_setopt($ch, CURLOPT_SSL_VERIFYPEER,0);
         curl_setopt($ch, CURLOPT_SSL_VERIFYHOST,0);
     }

        $page = curl_exec($ch);
                curl_close($ch);
echo $page;

 

[BinMgen]

he! sasa tutaelewana kweli kwa lugha hiyo, twendeni taratibu basi nasisi! NEWBIE angalau tusmbulie.