Get the most out of your Centmin Mod LEMP stack
Become a Member

SSL Here's Why Your Static Website Needs HTTPS

Discussion in 'Domains, DNS, Email & SSL Certificates' started by eva2000, Jul 13, 2018.

Tags:
  1. eva2000

    eva2000 Administrator Staff Member

    58,904
    12,490
    113
    May 24, 2014
    Brisbane, Australia
    Ratings:
    +19,122
    Local Time:
    12:44 AM
    Nginx 1.31.x
    MariaDB 10.x/11.4+/12.3+
    Troy Hunt illustrates why a static web site needs HTTPS Here's Why Your Static Website Needs HTTPS


     
  2. Daniel J. Lewis

    Daniel J. Lewis Award-winning podcaster and consultant

    117
    15
    18
    Oct 20, 2014
    Ratings:
    +33
    Local Time:
    10:44 AM
    1.8.0
    5.6
    Thanks for sharing! Podcasters need at least the first 5 minutes of this, too, and simply replace "static webpage" with "RSS feed" in their minds.

    (Apple will eventually require new podcasts and those that want analytics to use an HTTPS podcast RSS feed.)
     
  3. eva2000

    eva2000 Administrator Staff Member

    58,904
    12,490
    113
    May 24, 2014
    Brisbane, Australia
    Ratings:
    +19,122
    Local Time:
    12:44 AM
    Nginx 1.31.x
    MariaDB 10.x/11.4+/12.3+
    Yeah one good thing about HTTPS first movement is eventually Centmin Mod's Nginx vhost creation routines won't need to ask if users want HTTPS but instead HTTPS Nginx vhost will be the default !
     
  4. anthony parsons

    anthony parsons Member

    80
    20
    8
    Feb 12, 2017
    Ratings:
    +25
    Local Time:
    12:44 AM
    1.22.0
    10.4.26
    Don’t know why it’s not already with lets Encrypt freely available.
     
  5. eva2000

    eva2000 Administrator Staff Member

    58,904
    12,490
    113
    May 24, 2014
    Brisbane, Australia
    Ratings:
    +19,122
    Local Time:
    12:44 AM
    Nginx 1.31.x
    MariaDB 10.x/11.4+/12.3+
    well letsencrypt domain validation requires valid DNS records - unfortunately you can't automate that part for end users so if it was default now, some users will get failed vhost creation as letsencrypt would of failed
     
  6. anthony parsons

    anthony parsons Member

    80
    20
    8
    Feb 12, 2017
    Ratings:
    +25
    Local Time:
    12:44 AM
    1.22.0
    10.4.26
    Isn't that a good thing though? Just my opinion.
     
  7. eva2000

    eva2000 Administrator Staff Member

    58,904
    12,490
    113
    May 24, 2014
    Brisbane, Australia
    Ratings:
    +19,122
    Local Time:
    12:44 AM
    Nginx 1.31.x
    MariaDB 10.x/11.4+/12.3+
    Yeah really depends, some folks also want to setup private/internal test sites and letsencrypt won't work there either