是否需要FBML应用程序在10月1日之前提供HTTPS画布网址？ [英] Are FBML apps required to provide HTTPS canvas url by 1st of October?

问题描述

由于FBML应用程序的画布网址不是可以由最终用户直接访问的，所以我想不是，但是任何人都可以确认吗？

Since FBML apps canvas url(s) are not directly accessible by the end user, I suppose not , but can anyone confirm this ?

推荐答案

确认：所有画布和页面选项卡应用程序都需要SSL证书（不是沙箱模式而不是FBML）。请参阅： http://developers.facebook.com/docs/oauth2-https-migration / $ $ $ $ $ $ $ $ $ $ $ $ $ $ $ $ $ $ $ $ $ $ $ $ $ $ $ $ $ $ $ $ $ $ b b b。。。。。。。。。。。。。因此，如果您通过https不提供内容，您的应用程式的使用者可能会感觉不舒服。

Confirm: "An SSL Certificate is required for all Canvas and Page Tab apps (not in Sandbox mode and not FBML)." See here: http://developers.facebook.com/docs/oauth2-https-migration/ Though I am currently getting mixed content warnings in IE and Firefox when using Facebook in https mode and then loading content over http in the app. So users of your app might get kinda bad feeling if you do not serve your content over https.

更新：

Facebook：

我们听说FBML应用程序
是否必须支持HTTPS，FBML开发人员仍然需要知道用户
是否通过安全连接浏览Facebook，因为他们需要
检测是否提供服务iframe或视频内容通过HTTPS作为
结果，FBML应用程序必须获取SSL证书才能向通过安全连接浏览的用户提供此
类型的内容如果
具有FBML应用程序，请获取您的应用程序的SSL证书到
，通过安全连接接收浏览Facebook的用户的流量。

"We have heard that there is some confusion about whether FBML apps must support HTTPS. FBML developers still need to know whether users are browsing Facebook over a secure connection since they need to detect whether to serve iframe or video content over HTTPS. As a result, FBML apps must obtain SSL certificates in order to serve this type of content to users browsing over a secure connection. If you have an FBML app, please obtain an SSL certificate for your app to receive traffic from users browsing Facebook over a secure connection.

如果您为FBML应用启用SSL，请确保您的SSL
证书包含
信任链中的所有中间证书作为我们的SSL验证是严格的。您可以使用第三方SSL
分析工具（例如， https://www.ssllabs.com /index.html ）来检查
您的证书状态并修复任何错误（和警告）。如果您的SSL
证书有问题，您可能会在加载FBML画布应用程序时看到收到的空回复错误
。

If you enable SSL for your FBML app, please make sure that your SSL certificate includes all intermediate certificates in the chain of trust as our SSL validation is strict. You can use third-party SSL analysis tools (e.g., https://www.ssllabs.com/index.html) to check your certificate status and fix any errors (and warnings). If your SSL certificate has problems, you may see "Empty response received" error when you load your FBML canvas app."

https://developers.facebook.com/blog/post/567/

这篇关于是否需要FBML应用程序在10月1日之前提供HTTPS画布网址？的文章就介绍到这了，希望我们推荐的答案对大家有所帮助，也希望大家多多支持IT屋！