Let's Encrypt TLS for Every nginx conf

preview_player
Показать описание
Even in 2015, most websites don't use HTTPS by default, which is the bare minimum for web security. This talk is about a new project, Let's Encrypt, that will hopefully make it easy for anyone to set up and maintain TLS (for free!) on an NGINX server in less than 5 minutes.
Let's Encrypt is (1) a new certificate authority created by EFF in collaboration with Mozilla, Cisco, Akamai, IdenTrust, and a team at the University of Michigan and (2) a package that runs on your server to do the annoying work of managing certificates and configuring TLS. The CA will issue certificates for free, using a new automated protocol called ACME for verification of domain control, certificate issuance, and certificate renewal.
This talk will mostly cover how Let's Encrypt works on NGINX (though it also works on Apache) and the exciting nuances of automated TLS configuration. I'll also discuss ways that the NGINX community can help Let's Encrypt become more useful to server operators so that we move closer to encrypting the entire web.
Рекомендации по теме