Securing Your Website

With Let's Encrypt

(In Under 5 Minutes)

Jeremy Satterfield

http://jsatt.com

https://github.com/jsatt

@jsatt

jsatt@jsatt.com

Primer on Protocols

HTTP

SSL/TLS

HTTPS

HTTP/2

TLS Handshake

Obtaining a Certificate

The old way

  1. Prepare for Validation
  2. Generate CSR
  3. Order Certificate $$$
  4. Have domain validated

Obtaining a Certificate

The old way

  1. Prepare for Validation
  2. Generate CSR
  3. Order Certificate $$$
  4. Have domain validated
  5. Receive and Install Certificate

Let's Encrypt

Pros

Free

Automatic

Secure

Transparent

Open

Cooperative

Cons

Short Validity Time

No Wildcard Certificates

No Extended Validation or
Organization Validation

ACME

Obtaining a Certificate

In the modern world

Certbot


wget https://dl.eff.org/certbot-auto
chmod a+x certbot-auto
./certbot-auto certonly

Installing Your Certificate

https://mozilla.github.io/server-side-tls/ssl-config-generator/
  • nginx
  • Modern
  • nignx 1.4.6
  • openssl 1.0.1f

More

Wikipedia - Transport Layer Security

Let's Encrypt

ACME - Wikipedia GitHub

http://rebecca.meritz.com/ggm15/