June 2021
Intermediate to advanced
290 pages
9h 21m
Chinese
Content preview from Node与Express开发（第2版）
Become an O’Reilly member and get unlimited access to this title plus top books and audiobooks from O’Reilly and nearly 200 top publishers, thousands of courses curated by job role, 150+ live events each month,
O’Reilly covers everything we've got, with content to help us build a world-class technology community, upgrade the capabilities and competencies of our teams, and improve overall team performance as well as their engagement.I wanted to learn C and C++, but it didn't click for me until I picked up an O'Reilly book. When I went on the O’Reilly platform, I was astonished to find all the books there, plus live events and sandboxes so you could play around with the technology.I’ve been on the O’Reilly platform for more than eight years. I use a couple of learning platforms, but I'm on O'Reilly more than anybody else. When you're there, you start learning. I'm never disappointed.I'm always learning. So when I got on to O'Reilly, I was like a kid in a candy store. There are playlists. There are answers. There's on-demand training. It's worth its weight in gold, in terms of what it allows me to do.
198
｜
第
18
章
审计（不过这个要求似乎越来越少见了），以便建立数据安全实践。它们的价格可以低
至
150
美元一个域名。
我建议要么使用不那么昂贵的域名证书，要么使用扩展验证证书。尽管组织证书能验证
组织的确存在，但在浏览器上并不会显示出不同之处，因此根据我的经验，除非用户实
际去检查这个证书（很少会这样），否则组织证书跟域名证书外表上不会有差异。而扩
展验证证书通常会给用户显示一些线索（比如把地址栏显示成绿色，并且组织的名字紧
跟着
SSL
图标显示）
，以提示他们正在处理的是一个合法的业务。
如果你以前处理过
SSL
证书
，也许会奇怪我为什么不提证书保险。证书保险是价格差异
的一个因素，我忽略它是因为它所担保的事情几乎不可能发生。这个保险是说，如果有人
在你的网站上做了一笔交易而遭受了财务损失，并且能够证明
损失是因不充分的加密而导
致
，保险就会给这个人赔偿。如果你的应用涉及了财务交易，那么有人因为他们的损失而
试图对你采取法律行动当然是有可能的，但是要说损失是因不充分的加密而导致，则根本
不可能。如果因为一个在线服务导致了财务损失，从而需要向这个公司寻求赔偿，我绝对
不会试图去证明该服务的
SLL
加密是有问题的
。如果两个证书的差别只体现在价格和承保
范围上，那就买便宜的那一个。
购买一个证书首先从创建私钥开始（就如同前面对自签名证书所做的那样）。然后生成一
个
证书签名请求
（
CSR
）
，在购买过程中把它上传上去（证书颁发者对此会给出具体的步
骤）。要注意证书颁发者永远不会访问你的私钥，你的私钥也永远不会在互联网上传输，
Become an O’Reilly member and get unlimited access to this title plus top books and audiobooks from O’Reilly and nearly 200 top publishers, thousands of courses curated by job role, 150+ live events each month,
and much more.
Read now
Unlock full access
More than 5,000 organizations count on O’Reilly
O’Reilly covers everything we've got, with content to help us build a world-class technology community, upgrade the capabilities and competencies of our teams, and improve overall team performance as well as their engagement.Julian F.
I wanted to learn C and C++, but it didn't click for me until I picked up an O'Reilly book. When I went on the O’Reilly platform, I was astonished to find all the books there, plus live events and sandboxes so you could play around with the technology.Addison B.
I’ve been on the O’Reilly platform for more than eight years. I use a couple of learning platforms, but I'm on O'Reilly more than anybody else. When you're there, you start learning. I'm never disappointed.Amir M.
I'm always learning. So when I got on to O'Reilly, I was like a kid in a candy store. There are playlists. There are answers. There's on-demand training. It's worth its weight in gold, in terms of what it allows me to do.