- 主题发起人 Daiting1
- 发布时间 2018-05-25
第三条我要反驳的，小城市也是人才济济，二是人的眼界没那么宽，自我感觉还良好的那种，小城市反而更加挑剔。我觉得在大城市找小公司，这样面试机会应该会更多一些。
Confirm what server you are communicating with，这是要把信息提交到指定的服务器去的，而不是把信息提交到冒牌服务器上。我觉得是公钥私钥类型，就和银行给你发KEY一样的应用场景。
Prevent man-in-the-middle 是属于防止在传输过程中纂改你的数据。此种数据到服务器端还需要解密的，因此可以是加盐。
Let you confirm who you are to server,这种是属于向服务器自曝家门的，这样服务端才知道你的身份。这个可以是属于certificate类型。
Only confirm no change in identity，前后登录身份一致性。
条目太多，你要查，单独查这种类型的，看适合什么场景。
Prevent man-in-the-middle 是属于防止在传输过程中纂改你的数据。此种数据到服务器端还需要解密的，因此可以是加盐。
Let you confirm who you are to server,这种是属于向服务器自曝家门的，这样服务端才知道你的身份。这个可以是属于certificate类型。
Only confirm no change in identity，前后登录身份一致性。
条目太多，你要查，单独查这种类型的，看适合什么场景。
Confirm what server you are communicating with
A server certificate verifies the organization's identity to the client so that the client can securely browse the organization's Web site confident that:
Prevent man-in-the-middle 觉得可能也是certificate， man-in-the-middle就是伪造public key，使发消息的一方误以为收到的public key是对方的（其实是man-in-the-middle），所以ppk肯定不对，certificate可以验证身份
Only confirm no change in identites compared to previous communication 这个觉得ppk没错
Make a brute force.... Salt没错
Requires a 3rd party service to be available 觉得self-signed certificate也没错
Protects against DDOS attack这个觉得几个答案好像都不太对，维基百科上说Approaches to DDoS attacks against cloud-based applications may be based on an application layer analysis, indicating whether incoming bulk traffic is legitimate and thus triggering elasticity decisions without the economical implications of a DDoS attack.
Has the most impact on total bandwidth of a server
这个不太确定，查了下，说certificate没影响多少带宽，salt无非使md5值长一点，这就影响带宽了？不确定
Most commonly abused这个不确定是self-signed 还是MD5，我更倾向于md5
对计算机安全这块只有些书本知识，不太熟，仅供参考
A server certificate verifies the organization's identity to the client so that the client can securely browse the organization's Web site confident that:
- the website belongs to said organization (not an imposter), and
- transactions between the server and client are encrypted.
Prevent man-in-the-middle 觉得可能也是certificate， man-in-the-middle就是伪造public key，使发消息的一方误以为收到的public key是对方的（其实是man-in-the-middle），所以ppk肯定不对，certificate可以验证身份
Only confirm no change in identites compared to previous communication 这个觉得ppk没错
Make a brute force.... Salt没错
Requires a 3rd party service to be available 觉得self-signed certificate也没错
Protects against DDOS attack这个觉得几个答案好像都不太对，维基百科上说Approaches to DDoS attacks against cloud-based applications may be based on an application layer analysis, indicating whether incoming bulk traffic is legitimate and thus triggering elasticity decisions without the economical implications of a DDoS attack.
Has the most impact on total bandwidth of a server
这个不太确定，查了下，说certificate没影响多少带宽，salt无非使md5值长一点，这就影响带宽了？不确定
Most commonly abused这个不确定是self-signed 还是MD5，我更倾向于md5
对计算机安全这块只有些书本知识，不太熟，仅供参考
https://stackoverflow.com/questions/9436754/does-ssl-cause-a-lot-more-bandwidth 这个帖子说
No, there is not much of a difference, neither in terms of "performance" nor in terms of bandwidth.
According to Google, a company one would hope is a reliable source on large-scale networking, the network-bandwidth overhead is less than 2%.
觉得这个题出得不好
No, there is not much of a difference, neither in terms of "performance" nor in terms of bandwidth.
According to Google, a company one would hope is a reliable source on large-scale networking, the network-bandwidth overhead is less than 2%.
觉得这个题出得不好
Similar threads
