[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fMo_MRFip7Uy4PaquF5ajDFbxZ1EIPbZX-9FX1tphtYo":3},{"item":4,"related":51},{"id":5,"type":6,"title":7,"slug":8,"summary":9,"body":10,"coverUrl":11,"productScreenshots":12,"productLinks":13,"authorName":14,"authorUrl":15,"authorSubject":16,"category":17,"tags":22,"sourceLabel":39,"sourceName":40,"sourceUrl":41,"status":42,"seoTitle":43,"seoDescription":44,"canonicalUrl":45,"isFeatured":46,"sno":47,"sortOrder":48,"publishedAt":49,"updatedAt":50,"createdAt":50},"d2c41fc9-7291-4a0e-b404-873b80d4c351","article","浏览器地址栏的小锁到底保证了什么","https-tls-browser-lock-meaning","HTTPS 和 TLS 可以保护浏览器与网站之间的数据机密性、完整性和服务器身份，但小锁不能证明网站没有诈骗或内容一定真实。","浏览器地址栏里的小锁经常被理解成“这个网站安全”。更准确的说法是：它表示浏览器已经通过 HTTPS 使用 TLS 和网站建立了经过验证的加密连接。这个连接可以保护数据在传输途中不被轻易偷看或偷偷修改，但它不会替你判断网站卖的东西是真是假。\n\n## HTTPS 主要提供三种保障\n\n第一是机密性：你和网站之间交换的数据会被加密，公共 Wi‑Fi 上的旁观者通常不能直接读到内容。第二是完整性：攻击者如果试图在传输途中改动数据，校验应该能够发现异常。第三是身份认证：浏览器通过证书链确认自己连接的是证书所对应的域名，而不是一个随便冒充的服务器。\n\n```mermaid\nflowchart LR\n    A[输入网址] --> B[建立 TLS 握手]\n    B --> C[验证网站证书]\n    C --> D[协商加密参数]\n    D --> E[加密传输 HTTP 数据]\n    E --> F[浏览器显示页面]\n```\n\nTLS 握手发生在真正传输网页数据之前。客户端和服务器协商协议版本与加密套件，服务器出示证书，浏览器检查证书是否适用于当前域名、是否由信任机构签发、是否在有效期内。验证通过后，双方建立用于保护这次会话的密钥。\n\n## 小锁不能证明网站“值得信任”\n\nHTTPS 保护的是你和网站之间的通道，不是网站内容本身。诈骗网站也可以申请有效证书，于是地址栏仍然会显示小锁。一个钓鱼网站可以通过 HTTPS 安全地把你输入的银行卡号传给诈骗者；从技术角度看，传输过程可能没有被第三方窃听，但接收数据的对方就是问题所在。\n\n因此，看到小锁后仍要检查域名、品牌拼写、页面跳转和付款对象。不要把“连接加密”误读成“商家可靠”“文件无恶意”或“页面内容真实”。HTTPS 也不能阻止你在已经感染恶意软件的设备上泄露信息。\n\n## 为什么有时会看到证书警告\n\n证书过期、域名不匹配、信任链异常，或者设备时间错误，都可能触发浏览器警告。不要为了打开页面而随意点击“继续访问”，尤其是登录、付款和上传文件的页面。警告的意义正是提醒你：浏览器无法确认这条连接的身份或完整性。\n\n## 地址栏之外还要看什么\n\n网站最好把所有资源都通过 HTTPS 加载，并使用 HSTS 让浏览器后续自动坚持安全连接。用户则应该把 HTTPS 当作“传输层护栏”，而不是网站信誉评分。它解决了网络中途被偷看和篡改的一大类问题，却不能替代反诈骗意识、账号保护和设备安全。\n\n来源：[MDN：Transport Layer Security](https:\u002F\u002Fdeveloper.mozilla.org\u002Fen-US\u002Fdocs\u002FWeb\u002FSecurity\u002FDefenses\u002FTransport_Layer_Security)","\u002Fuploads\u002F2026-09-12\u002F2e79166a-07ac-4508-81ed-c1cf2afa51e5.jpg",[],[],"Foundit","https:\u002F\u002Ffoundit.cn","foundit-ai-editorial",{"id":18,"name":19,"slug":20,"description":21},"6179d3b6-dc34-4483-9ded-3cd9f1b37a47","科普","abbreviation","介绍各领域新兴概念",[23,27,31,35],{"id":24,"name":25,"slug":26},"7c76bfc2-f80f-4ee0-a95d-27bd8708b434","技术","slug",{"id":28,"name":29,"slug":30},"82f427f8-6275-4cbb-bcac-cf1948488006","网页应用","web-app",{"id":32,"name":33,"slug":34},"4c2bbea6-eab7-40a8-8447-1de478ff7749","分析","analyse",{"id":36,"name":37,"slug":38},"7da20200-5815-42a5-851a-bc8c1db554cb","应用","app","MDN TLS 文档","Transport Layer Security","https:\u002F\u002Fdeveloper.mozilla.org\u002Fen-US\u002Fdocs\u002FWeb\u002FSecurity\u002FDefenses\u002FTransport_Layer_Security","published","浏览器地址栏小锁是什么意思：HTTPS 能保护什么","解释 HTTPS 与 TLS 提供的加密、完整性和身份认证，以及为什么小锁不能代表网站本身可信。",null,false,49,0,"2026-09-12T00:00:00.000Z","2026-09-12T04:45:48.162Z",[52,60,69],{"id":53,"type":6,"title":54,"slug":55,"summary":56,"coverUrl":57,"authorName":14,"sno":58,"publishedAt":49,"createdAt":59},"d8cd5ddb-84fe-406c-9e2d-49a74aa73aed","网站为什么越来越少让你拼图验证“我是人”","captcha-turnstile-how-human-verification-works","新一代人机验证会在浏览器后台运行挑战并生成短期令牌，再由网站服务器确认结果。本文解释它为什么减少交互、如何防止重放，以及它的误判边界。","\u002Fuploads\u002F2026-09-12\u002F6d69d6f0-e936-4c53-92e2-3412dd3fde18.jpg",44,"2026-09-12T04:45:49.580Z",{"id":61,"type":6,"title":62,"slug":63,"summary":64,"coverUrl":65,"authorName":14,"sno":66,"publishedAt":67,"createdAt":68},"e5b311d7-121f-4fd2-bac6-d7b9f4bee903","PDF 里的电子签名，为什么不是贴一张手写图片","pdf-digital-signature-how-it-works","手写签名图片只能说明页面上有一张图，PDF 数字签名则通过私钥、公钥和数字证书验证签名者身份，并检测签名后的文档是否被修改。本文解释两者的关键差别。","\u002Fuploads\u002F2026-09-13\u002F166eb6f1-a717-4cc5-a869-cc1d99584037.jpg",46,"2026-09-13T00:00:00.000Z","2026-09-13T09:35:50.299Z",{"id":70,"type":6,"title":71,"slug":72,"summary":73,"coverUrl":74,"authorName":14,"sno":75,"publishedAt":49,"createdAt":76},"8100557d-c909-40e7-9ecf-6ab5f0edd282","为什么二维码破了还能扫出来？二维码的纠错秘密","qr-code-error-correction-explained","二维码不仅能编码网址和数字，还加入了定位图案与纠错信息。本文解释二维码为什么能容忍污渍和破损，以及为什么能扫出来不代表链接一定安全。","\u002Fuploads\u002F2026-09-12\u002F46fd6845-ccdf-41db-a5c7-4daf90c73dd7.jpg",42,"2026-09-12T04:45:41.285Z"]