HTML5 中的 Keygen 标签 [英] Keygen tag in HTML5
问题描述
所以我在 HTML5 中遇到了这个新标签，
So I came across this new tag in HTML5, <keygen>. I can't quite figure out what it is for, how it is applied, and how it might affect browser behavior.
我知道此标签用于表单加密，但是 challenge 属性?
I understand that this tag is for form encryption, but what is the difference between <keygen> and having a SSL certificate for your domain. Also, what is the challenge attribute?
我不打算使用它，因为它远未在可接受的浏览器范围内实现，但我很好奇这个标签究竟做了什么.我所能找到的只是模糊的千篇一律的文档，没有实际的使用示例.
I'm not planning on using it as it is far from implemented in an acceptable range of browsers, but I am curious as to what EXACTLY this tag does. All I can find is vague cookie-cutter documentation with no real examples of usage.
我找到了一个非常有用的文档，此处.这贯穿 keygen 标记的客户端和服务器端实现.
I have found a VERY informative document, here. This runs through both client-side and server-side implementation of the keygen tag.
我仍然很好奇这比域 SSL 证书有什么好处.
I am still curious as to what the benefit of this over a domain SSL certificate would be.
推荐答案
SSL 是关于服务器识别"或服务器和客户端认证(相互认证)".
SSL is about "server identification" or "server AND client authentication (mutual authentication)".
在大多数情况下，只有服务器会在 SSL 握手期间提供其服务器证书，以便您可以确保这确实是您希望连接的服务器.在某些情况下，服务器还想验证 你 真的是你假装的那个人.为此，您需要一个客户证书.
In most cases only the server presents its server-certificate during the SSL handshake so that you could make sure that this really is the server you expect to connect to. In some cases the server also wants to verify that you really are the person you pretend to be. For this you need a client-certificate.
The <keygen> tag generates a public/private key pair and then creates a certificate request. This certificate request will be sent to a Certificate Authority (CA). The CA creates a certificate and sends it back to the browser. Now you are able to use this certificate for user authentication.
这篇关于HTML5 中的 Keygen 标签的文章就介绍到这了，希望我们推荐的答案对大家有所帮助，也希望大家多多支持IT屋！
