Phiên Hỏi & Đáp hôm nay đến với chúng tôi theo lịch sự của SuperUser - một phân khu của Stack Exchange, một nhóm các trang web Hỏi & Đáp do cộng đồng điều hành.
Câu hỏi
Người đọc siêu người dùng kiewic muốn biết cách buộc Google Chrome luôn sử dụng HTTPS thay vì HTTP bất cứ khi nào có thể:
Many websites offer both versions (HTTPS and HTTP) like https://stackoverflow.com and https://stackoverflow.com for instance.
Is there any way to force Google Chrome to always try for HTTPS first before HTTP when typing something like stackoverflow.com in the address bar?
Làm thế nào để bạn buộc Google Chrome phải luôn sử dụng HTTPS thay vì HTTP bất cứ khi nào có thể?
Câu trả lời
Người đóng góp SuperUser paradroid và Omar có câu trả lời cho chúng tôi. Đầu tiên, paradroid:
You could try the HTTPS Everywhere extension for Google Chrome.
Tiếp theo là câu trả lời từ Omar:
Force HTTPS in Google Chrome
Google is one of the more aggressive companies pushing to make this happen. Here are several ways you can force HTTPS in Chrome to ensure your browsing is as safe as possible.
Start Google Chrome with HTTPS
Enable Google Chrome support by typing chrome://net-internals/ into your address bar, then select HSTS from the drop-down menu. HSTS is HTTPS Strict Transport Security, a way for websites to elect to always use HTTPS. Using this setting, you can now force HTTPS for any domain you want and even “pin” the domain so that only a more trusted subset of CAs are permitted to identify that domain. The downside is that if you force a domain that does not have SSL at all, you will not be able to access the website.
HTTP Strict Transport Security (The Chromium Projects)
Force HTTPS with the KB SSL Enforcer Extension
This extension will force HTTPS in Google Chrome for websites that support it. Keep in mind that It is not completely secure against the infamous Firesheep, but it does minimize the risk greatly. Due to Google Chrome’s limitations, the KB SSL Enforcer extension redirects the page while it is loading. You will see a quick flicker of the unencrypted page, but it redirects you as fast as possible.
KB SSL Enforcer Extension Homepage
Use HTTP Extension to Force HTTPS in Google Chrome
The Use HTTP extension will force defined sites to use HTTPS instead of HTTP. It comes preloaded with two defined sites: Facebook and Twitter. Like the previous extension, the initial request is sent to websites not using HTTPS.
Use HTTPS Extension Homepage
Có cái gì để thêm vào lời giải thích? Tắt âm thanh trong các ý kiến. Bạn muốn đọc thêm câu trả lời từ những người dùng Stack Exchange có hiểu biết công nghệ khác? Xem toàn bộ chuỗi thảo luận tại đây.