Skip to Content
Web开发的身份和数据安全
book

Web开发的身份和数据安全

by Jonathan LeBlanc, Tim Messerschmidt
January 2018
Intermediate to advanced
203 pages
3h 59m
Chinese
China Electric Power Press Ltd.
Content preview from Web开发的身份和数据安全
身份安全基础知识
|
51
电商行业的支付过程尤其让人头痛。让顾客自己动手在物理设备上输入
16
位数字的信用卡卡号很不便,在触屏上简直令人痛苦。鉴于此,才出现了
PayPal
、
Amazon Payments
和
Google Wallet
这样的服务。有了这些服务,用
户只需在一个地方输入重要信息,然后便可以在多个网站重复使用。剥离支
付细节这样敏感的凭据之后,网站的结算流程能得到极大的速度提升。
选举和其他很多政府服务也常使用实际身份。例如,某国家的公民身份证背
后由
OpenID
提供支持。
注
1
这相当于一种电子政务形式,让生活在偏远地区
的人民能参与国事讨论,为国家的政治环境做出积极贡献。
弱身份
弱身份是一个旧概念,如今又得到了人们的关注。弱身份也可称为无身份,
指的是验证用户身份时不访问任何个人资料。
Twitter
的
Digits
(
http://get.digits.com
)就是这样一个服务,它允许用户通过
手机号码登录。这里,识别身份的工具是全球唯一的个人手机号码。根据本章
开头给出的“身份”定义,通过手机号码显然能区分不同的人。
Digits
这样的
服务旨在使用几乎每个人都有的要素代替容易出错且易受攻击的密码。
Yahoo!
也采用了类似的方式,它通过短信发送一次性密码实现无密码登录
注
2
,不过
尚未对开发者开放。
利用身份提升用户体验
Nielsen Norman Group
开展的用户体验研究表明,刚接触用户时没必要让他
们登录,倘若强制注册或登录,往往有损访客到用户的转化率。
注
3
用户体验
研究认为目前可取的做法是提供功能预览,帮用户决定是否要使用应用。 ...
Become an O’Reilly member and get unlimited access to this title plus top books and audiobooks from O’Reilly and nearly 200 top publishers, thousands of courses curated by job role, 150+ live events each month,
and much more.

Read now

Unlock full access

More than 5,000 organizations count on O’Reilly

AirBnbBlueOriginElectronic ArtsHomeDepotNasdaqRakutenTata Consultancy Services

QuotationMarkO’Reilly covers everything we've got, with content to help us build a world-class technology community, upgrade the capabilities and competencies of our teams, and improve overall team performance as well as their engagement.
Julian F.
Head of Cybersecurity
QuotationMarkI wanted to learn C and C++, but it didn't click for me until I picked up an O'Reilly book. When I went on the O’Reilly platform, I was astonished to find all the books there, plus live events and sandboxes so you could play around with the technology.
Addison B.
Field Engineer
QuotationMarkI’ve been on the O’Reilly platform for more than eight years. I use a couple of learning platforms, but I'm on O'Reilly more than anybody else. When you're there, you start learning. I'm never disappointed.
Amir M.
Data Platform Tech Lead
QuotationMarkI'm always learning. So when I got on to O'Reilly, I was like a kid in a candy store. There are playlists. There are answers. There's on-demand training. It's worth its weight in gold, in terms of what it allows me to do.
Mark W.
Embedded Software Engineer

You might also like

大数据项目管理:从规划到实现

大数据项目管理:从规划到实现

Ted Malaska, Jonathan Seidman
Python3.0科学计算指南

Python3.0科学计算指南

Posts & Telecom Press, Claus Führer, Jan Erik Solem, Olivier Verdier
算法技术手册(原书第2 版)

算法技术手册(原书第2 版)

George T.Heineman, Gary Pollice, Stanley Selkow
解密金融数据

解密金融数据

Justin Pauley

Publisher Resources

ISBN: 9787519814205