Keygen标签在HTML5中 [英] Keygen tag in HTML5

问题描述

所以我在HTML5中遇到了这个新标签，< keygen> 。我无法弄清楚它是什么，它是如何应用的，以及它如何影响浏览器行为。

我知道这个标签是用于表单加密的，但是< keygen> 之间有什么不同？您的域的SSL证书。另外，什么是挑战属性？

我没有打算使用它，因为它远远不是在可接受的浏览器范围内实现的，但我很好奇这个标签究竟是干什么的。所有我能找到的都是模糊的饼干文档，没有使用过的实例。

---

编辑： em>

我找到了一份非常翔实的文件， here 。这通过keygen标记的客户端和服务器端实现。

我仍然好奇这对于域SSL证书的好处是什么。

解决方案

SSL是关于服务器标识或服务器和客户端认证（相互认证）的。 b
$ b

在大多数情况下，只有服务器在SSL握手期间提供其服务器证书，以便确保这是您期望连接的服务器。在某些情况下，服务器还希望验证你确实是你假装的人。为此，您需要客户端证书。

< keygen> 标签生成公钥/私钥对然后创建证书请求。该证书请求将被发送到证书颁发机构（CA）。 CA创建一个证书并将其发送回浏览器。现在您可以使用此证书进行用户身份验证。

So I came across this new tag in HTML5, <keygen>. I can't quite figure out what it is for, how it is applied, and how it might affect browser behavior.

I understand that this tag is for form encryption, but what is the difference between <keygen> and having a SSL certificate for your domain. Also, what is the challenge attribute?

I'm not planning on using it as it is far from implemented in an acceptable range of browsers, but I am curious as to what EXACTLY this tag does. All I can find is vague cookie-cutter documentation with no real examples of usage.

---

Edit:

I have found a VERY informative document, here. This runs through both client-side and server-side implementation of the keygen tag.

I am still curious as to what the benefit of this over a domain SSL certificate would be.

解决方案

SSL is about "server identification" or "server AND client authentication (mutual authentication)".

In most cases only the server presents its server-certificate during the SSL handshake so that you could make sure that this really is the server you expect to connect to. In some cases the server also wants to verify that you really are the person you pretend to be. For this you need a client-certificate.

The <keygen> tag generates a public/private key pair and then creates a certificate request. This certificate request will be sent to a Certificate Authority (CA). The CA creates a certificate and sends it back to the browser. Now you are able to use this certificate for user authentication.

这篇关于Keygen标签在HTML5中的文章就介绍到这了，希望我们推荐的答案对大家有所帮助，也希望大家多多支持IT屋！