HTTPS with Certbot (LetsEncrypt)

From 24PinTech Wiki
Jump to navigation Jump to search


About

Certbot logo.png

When the internet first started, all of the websites ran on an insecure port 80, which is also known as HTTP. There were quite a few issues with this, like when a packet of data would be sent to a server with sensitive information, an outside attacker could listen and take that data. HTTPS uses and encrypted protocol called SSL to encrypt data being sent. You can watch this video for more information on the subject.

By default, Nginx runs on port 80, which is insecure HTTP, this is something that should be fixed before making the site public. To enable HTTPS, every site needs its own certificate, although they can be very hard and tedious to create manually, which is why we utilize the free program Certbot! Certbot provides a very simple way to create and apply these certificates to ensure a secure connection.