tls on {bjørn:johansen}

The future of Certificate Authorities

Mon, 01 Aug 2016 16:38:47 +0000

With the advent of the fully automated and free of cost certificate authorities Let’s Encrypt and StartCom there is no doubt that the future of CAs are changing.

Let’s Encrypt for Nginx

Thu, 31 Mar 2016 20:48:31 +0000

Let’s install an SSL-certificate from Let’s Encrypt for Nginx.

Redirect all HTTP requests to HTTPS with Nginx

Thu, 15 Oct 2015 19:15:43 +0000

All login credentials transferred over plain HTTP can easily be sniffed by an MITM attacker, but is is not enough to encrypt the login forms. If you are visiting plain HTTP pages while logged in, your session can be hijacked, and not even two-factor authentication will protect you. To protect all info sent between your visitors – which includes you – and your web server, we will redirect all requests that are coming over plain HTTP to the HTTPS equivalent.

Optimizing HTTPS on Nginx

Sat, 18 Jan 2014 23:49:30 +0000

Now that you have secured Nginx with HTTPS and enabled SPDY enabled HTTP/2, it’s time to improve both the security and the performance of the server.

Securing Nginx with HTTPS

Thu, 22 Aug 2013 19:53:15 +0000

Adding a certificate and using the HTTPS protocol is a good improvement to the security in the communication between the browser and the server, and should be in place on all sites that have a user login. Contrary to what many (older) guides say, it doesn’t add much load on your server and is fairy easy and cheap to set up right.