New Course out now! No Images? Click here Hey there!You know that little lock you see in front of URLs like this? Well we've just added a NEW course, which shows you how to get a Free SSL certificate and setup a secure site yourself! 🔒 🎉 Check it out: HTTPS With Let's EncryptLearn How to Get a Secure Lock Icon for Your Site
– Sébastien A., Web Developer Free Automated A+ Plus Graded SSL Certificates With Let's EncryptSearch engines (especially Google) and major browser vendors are really cracking down on insecure sites. For example... Google ranks insecure pages (HTTP) worse than secure pages (HTTPS). As of mid-2014 Google has openly stated that HTTPS is now part of their page rank algorithm. Simply put, insecure sites being served over HTTP will rank worse than secure sites being served over HTTPS. If that's not bad enough... Chrome, FireFox and other browser vendors are adding more and more visual cues that make even non-technical folks aware that your site is dangerous to view. It won't take long until all insecure sites are seen as being malicious and untrustworthy, even if you're technically not doing anything wrong. Although honestly, I would classify not securing your site as doing your visitors a disservice. But it gets worse... Insecure sites allow anyone to intercept and read the traffic between your visitors and your site. That's because insecure sites transmit all data over plain text. This makes your visitor's data sensitive to man in the middle attacks, which in turn could be a disaster for both your audience and yourself. Remember, most people using your site aren't tech savvy, and don't understand that by logging into an insecure site they are leaking sensitive data. If their account gets compromised, guess who they're gong to blame? Yep, your site. It's your responsibility as a site owner to protect your visitors from such attacks... The good news is, securing your site over HTTPS (with SSL certificates) fixes all of the above problems.
Why Setup Your Own Encryption with Let's Encrypt?Most Other SSL Certificate Vendors Will Try to Rob You Blind👍 Let's EncryptFree, automated and open certificate authority
👎 Most Other SSL Certificate VendorsExpensive, stuck in the past and piggy backs off others
Let's Encrypt Is the Best Thing Ever for HTTPS1. Let's Encrypt is its own certificate authority, meaning it has been white listed by major browsers to offer trusted SSL certificates. Most other SSL certificate vendors are just re-sellers who leech off other certificate authorities because it's very difficult to become a trusted certificate authority. 2. Let's Encrypt allows you to issue SSL certificates for free. You can issue certificates for let's say: example.com, blog.example.com and admin.example.com for free. Other vendors would charge you $30 / year because you would need 3 separate certs (sub-domains need their own cert). 3. Let's Encrypt allows you to automate verifying and renewing your SSL certificates and doesn't require setting up any billing details. Other SSL vendors require you to manually renew each individual certificate on a yearly basis, and also keep your billing information up to date. 4. Let's Encrypt open sourced all of their tools and has a vibrant community built around it. Other SSL vendors keep everything behind closed doors and force you to use their difficult to use website because it's beneficial to them (example: they charge you certificate revoke fees if you mess up). 5. In 1 year, Let's Encrypt went from having 4+ million active SSL certificates to 40+ million active certs and their growth is exploding. Other SSL vendors are simply not issuing as many certs because people are beginning to realize they don't need to get price gouged to secure their site. Learn All of the Steps to Host Your Own Site Along the WayHere's What We'll CoverA sprinkle of theory, followed by real world examples.
*Don't worry, you'll still be able to follow along if you don't have a custom domain name. Who Is This For?Web developers who want to secure their site You don't need to be a programming wizard to follow along, but you will want a bit more experience than just creating a few HTML sites. This course covers a lot of ground but I do explain each step of the way, and if you have the willingness to fiddle around with Bash scripts and Nginx configs (with video guidance), you'll do just fine. Production Ready Configs and Scripts to Secure Any Site Using Nginx or ApacheWhat about Golang, Phoenix and anything else? That's ok, they will work too! About the AuthorHi, I'm Nick JanetakisI've built many projects with Flask and Docker over the years. I'm a self taught full stack developer who has been learning and working as a freelance consultant for the last 20 years. The battle hardened source code used in this course is what I've personally used and tweaked from real world experience. Over 20,000 people have taken at least one of my courses, which includes Dive Into Docker and HTTPS With Let's Encrypt. How do you get access to the course? Join SitePoint Premium and get access to this course, plus 350+ other books and courses for just $6/month! Happy learning! |