All geek questions in one place

SSL Browser Support Detection

How can you determine if the client browser supports SSL? I do not refer to the server. HTTPS_ * Variables. I want to be able to determine if the browser does not support SSL.

PS I know that this is possible because this company ( http://www.cyscape.com ) has a product that may even detect when you cancel the use of SSL support from your browser.

+3
source share
4 answers

All browsers have SSL support (period). No one is going to release a browser that cannot be used. HTTPS is a security requirement, and in addition to OWASP A3: Broken Authentication and Session Management.

+1
source

While it is relatively easy to check if the server supports SSL connections, finding browser support for this is very difficult. The solution probably requires a client-side extension that implements the logic needed to search through the browser configuration or version information to support SSL. This problem becomes even more complicated, since the extension should work with multiple browsers.

, SSL, , , , SSL, -.

0

, , - SSL.

SSL , https?

HTTP , cookie HTTP, , HTTPS. "secure" cookie , .

JavaScript- window.location https. ( Java- LiveConnect - Flash.)

? SSL , - SSL, cookie JavaScript . SSL (, , robots.txt), , JavaScript, SSL , , , SSL .

0

SSL Man-In-The-Middle , , SSL.

, , SSL ( WAP-TLS). , , , , , .

0

Source: https://habr.com/ru/post/1755371/

More articles:


All Articles