SSL all the things
summary
Let's Encrypt issues 90-day certificates via the ACME protocol: create an account key, send a CSR, respond to ACME challenges by writing files under /.well-known/acme-challenge, then retrieve a signed cert. Tools shown include acme-tiny (used for django-project.com) and integrations for Nginx or proxies; Python uses SSLContext with purpose=SERVER_AUTH, load cert+key, set an OpenSSL cipher string and wrap sockets. Notes: >5 million sites use Let's Encrypt, automate renewals, avoid old SSL/TLS versions, test with SSL Labs, and beware HSTS and pinning pitfalls.
AI-written summary · about
chapters (11)
- 0:00Introduction
- 1:24SSL all the things
- 2:45Disclaimer
- 4:12What is SSL
- 5:26How SSL works
- 7:54Lets Encrypt
- 13:02Client
- 14:20Server
- 16:05Certificate revocation
- 16:55HTTP SDS HPKP
- 19:36Conclusion
related talks
25mSSL All The Things
39mA Walk Through the Land of
42mLet's go HTTPS
11mACME TLS-SNI-01 issuing Let's Encrypt SSL-certs for any domain using shared hosting
22mACME: Certificate management has never been easier
51mEverything you learned about SSL is deprecated
13mLet's Encrypt or how to make your site HTTPS
38mImproving the SRE Experience for 10 Years as a Free, Open, and Automated...