STEM与日常科技·英语30篇（1）
27 / 30
正在确认阅读权限…
HTTPS and the Man-in-the-Middle Attack
HTTPS与中间人攻击：直觉理解
-
HTTPS encrypts data between your browser and a website using SSL/TLS protocols.HTTPS 使用 SSL/TLS 协议加密浏览器与网站之间的数据。
-
This encryption prevents eavesdroppers from reading your passwords or credit card numbers.这种加密可防止窃听者读取您的密码或信用卡号。
-
A 'man-in-the-middle' attack happens when a hacker secretly intercepts and relays messages.‘中间人攻击’指黑客秘密截获并转发通信。
-
Without HTTPS, attackers could read or even alter unencrypted HTTP traffic easily.若无 HTTPS，攻击者可轻易读取甚至篡改未加密的 HTTP 流量。
-
Modern browsers warn users if a site’s security certificate looks suspicious or expired.现代浏览器会在网站安全证书可疑或过期时向用户发出警告。
-
Certificates are issued by trusted authorities to verify a site’s true identity.证书由受信任的权威机构颁发，用于验证网站的真实身份。
-
Attackers sometimes trick users into installing fake certificates on their devices.攻击者有时会诱骗用户在设备上安装伪造证书。
-
Public Wi-Fi networks are especially risky without HTTPS protection.公共 Wi-Fi 网络若无 HTTPS 保护，风险尤其高。
-
Always check for the padlock icon and 'https://' before entering sensitive information.输入敏感信息前，请务必确认地址栏有锁形图标和 'https://'。
-
End-to-end encryption adds another layer, but HTTPS remains the first critical defense.端到端加密虽提供额外防护，但 HTTPS 仍是首要关键防线。