SSL All The Things
summary
Shows that Let’s Encrypt has issued almost 1.8 million certificates and explains the ACME flow: account key, CSR, write ACME challenges on port 80, Let’s Encrypt validates then issues a cert. Certificates expire after 90‑day certificates so automation is required; official client can even rewrite Apache/Nginx config while ACME‑tiny is a tiny, auditable alternative. Covers Django settings to force HTTPS, secure cookies, and tradeoffs for HSTS/HPKP and key revocation.
AI-written summary · about
chapters (21)
- 0:00Intro
- 2:44Disclaimer
- 4:06Information Security
- 5:05Web Server Configuration
- 5:44Apache SSL Configuration
- 7:14Lets Encrypt
- 7:39Certificate Authority
- 10:42Certificate Management Environment
- 11:29SSL API
- 12:54Lets Encrypt API
- 13:22Lets Encrypt Tools
- 15:00Reverse Proxy
- 16:27SSL Features
- 17:09HTTPStrict Transport Security
- 17:47HP KP HDB
- 18:20Let Encrypt
- 18:49Things Can Go Wrong
- 19:01HSTP
- 19:20Keys
- 20:16Sources
- 20:57Questions
related talks
26mSSL all the things
39mA Walk Through the Land of
42mLet's go HTTPS
22mACME: Certificate management has never been easier
51mEverything you learned about SSL is deprecated
06mKeynote: Ten Years as a Free, Open, and Automated Certificate Authority
11mACME TLS-SNI-01 issuing Let's Encrypt SSL-certs for any domain using shared hosting
13mLet's Encrypt or how to make your site HTTPS