Using Free SSL/TLS Certificates from Let’s Encrypt for Nginx

Re:Using Free SSL/TLS Certificates from Let’s Encrypt for Nginx by dheera on Monday February 22, 2016 @11:14AM (#11151823)

Or better yet, make "ssl_letsencrypt on;" the default. Make it so that newbies can just apt-get install nginx/apache/lighttpd/etc. and have https up and running, no questions asked. The real reason https adoption isn't up to par has less to do with people not willing to spend money, and more because it's not up by default. Now that https is free, please make it enabled by default.

[ Parent | on HN ]

Re:Using Free SSL/TLS Certificates from Let’s Encrypt for Nginx by mholt on Monday February 22, 2016 @11:45AM (#11152125)

Check out Caddy, which enables HTTPS by default: https://caddyserver.com/docs/automatic-https

[ Parent | on HN ]

Re:Using Free SSL/TLS Certificates from Let’s Encrypt for Nginx by majewsky on Monday February 22, 2016 @12:43PM (#11152650)

That was something that I complained about even before letsencrypt. It's insanely difficult for anyone except crypto experts to figure out a sane selection of cipher suite, so why can't they not just include one or two sane presets with the application, that get updated along with it when algorithms are broken and new ones emerge?

[ Parent | on HN ]

Re:Using Free SSL/TLS Certificates from Let’s Encrypt for Nginx by nickik on Monday February 22, 2016 @01:05PM (#11152854)

I just went threw a full configuration and the cipther suit was the easiest. I had some guides and the basically said, copy this or this depending on how prohibitive you want it.

The hardest thing to figure out is HPKP (and I still have not).

[ Parent | on HN ]

Re:Using Free SSL/TLS Certificates from Let’s Encrypt for Nginx by serge2k on Monday February 22, 2016 @05:51PM (#11155000)

are the guides up to date?

I used https://cipherli.st/

hopefully it's good, if not it isn't protecting anything important really

[ Parent | on HN ]