https://plumephp.com/tags/tls/Recent content in TLS on PlumePHPHugozh-CNSat, 16 Mar 2024 00:00:00 +0000https://plumephp.com/webhook-security/Sat, 16 Mar 2024 00:00:00 +0000https://plumephp.com/webhook-security/<h1 id="webhook-安全防御指南签名校验tls-与重放攻击防护">Webhook 安全防御指南：签名校验、TLS 与重放攻击防护</h1> <blockquote> <p><strong>TL;DR</strong> 本文是 Webhook 安全的实战手册：</p> <ul> <li><strong>5 分钟搭建</strong>完整 HMAC-SHA256 签名验证（Go 7 行、Node 8 行、Python 5 行、Java 12 行）</li> <li>掌握 <strong>3 大攻击面</strong>：伪造请求、重放攻击、中间人劫持</li> <li>获取 <strong>1 份安全检查清单</strong>，上线前逐项打钩</li> </ul> </blockquote> <p><strong>阅读收益</strong></p>