Securing Your Website
With Let's Encrypt
(In Under 5 Minutes)
Jeremy Satterfield
Primer on Protocols
HTTP
SSL/TLS
HTTPS
HTTP/2
TLS Handshake
Obtaining a Certificate
The old way
- Prepare for Validation
- Generate CSR
- Order Certificate $$$
- Have domain validated
Obtaining a Certificate
The old way
- Prepare for Validation
- Generate CSR
- Order Certificate $$$
- Have domain validated
- Receive and Install Certificate
Let's Encrypt
Pros
Free
Automatic
Secure
Transparent
Open
Cooperative
Cons
Short Validity Time
No Wildcard Certificates
No Extended Validation or
Organization Validation
ACME
Obtaining a Certificate
In the modern world
Certbot
wget https://dl.eff.org/certbot-auto
chmod a+x certbot-auto
./certbot-auto certonly
Installing Your Certificate
https://mozilla.github.io/server-side-tls/ssl-config-generator/- nginx
- Modern
- nignx 1.4.6
- openssl 1.0.1f