Convenient SSL implementation

HTTPS for All

© Lead Image © rawpixel, 123RF.com

© Lead Image © rawpixel, 123RF.com

Article from Issue 184/2016
Author(s):

The Let's Encrypt project delivers a free, fast, and uncomplicated way to create SSL certificates.

HTTP, still the most commonly used web protocol, is very much like a postcard or unencrypted email when it comes to transmitting data: Anyone who has access to the data can read the information. Because data packets do not take the shortest route – independent of the protocol – but rather the fastest transmission path, you could find that data travels around the world before reaching the recipient. Your packets therefore have no way of avoiding many potential sniffers.

The Hypertext Transfer Protocol Secure, HTTPS, helps to mitigate this problem by implementing encrypted and authenticated communication between the web server and the browser. Although a sniffer can still see the data traffic between the two endpoints, it cannot see the content. The Let's Encrypt initiative has the aim of establishing HTTPS globally by making it easy for server operators to implement wherever possible. To make it so, the developers automate the procedures for creating, setting up, and updating SSL certificates with just a single command and within minutes.

The Problem

Whether because of stubbornness, a lack of technical knowledge, or financial reasons, HTTPS is still not seeing widespread use, even though the protocol was developed by Netscape and published as early as 1994 in the Netscape browser. Trusted server certificates are hard to come by free of charge, and the annual costs of these certificates often are not worth the price for private server operators.

[...]

Use Express-Checkout link below to read the full article (PDF).

Buy this article as PDF

Express-Checkout as PDF
Price $2.95
(incl. VAT)

Buy Linux Magazine

SINGLE ISSUES
 
SUBSCRIPTIONS
 
TABLET & SMARTPHONE APPS
Get it on Google Play

US / Canada

Get it on Google Play

UK / Australia

Related content

  • Charly's Column – Let's Encrypt

    Columnist Charly fights the fight for free SSL certificates with Let's Encrypt. He particularly likes the matching software client that takes care of everything – from certificate retrieval to web server integration.

  • The sys admin's daily grind: Let's Encrypt wildcards

    The pleasure of owning a nice domain like sensorenresidenz.de is clouded by the requirement of an X.509 certificate for every subdomain that the admin wants or has. Columnist Charly can help boost the webmaster's spirits.

  • Caddy

    Caddy lets even the most inexperienced user set up a secure web server.

  • PKI with Dogtag

    If you are looking for more control of your public key infrastructure, try the powerful Dogtag certificate system.

  • Safe Messaging with TLSA

    Decoupled application design gets in the way of secure communication, but a little known feature of DNS can provide message security.

comments powered by Disqus
Subscribe to our Linux Newsletters
Find Linux and Open Source Jobs
Subscribe to our ADMIN Newsletters

Support Our Work

Linux Magazine content is made possible with support from readers like you. Please consider contributing when you’ve found an article to be beneficial.

Learn More

News