Encrypt the Web For $0
summary
Claims that HTTPS can be cheap and fast are backed by concrete wins: Let's Encrypt issues automated certificates and reports over 3 million issued with 10,000 in the first eight hours, integrations for Apache and nginx and plugins for hosts, and automated renewal and revocation. Performance tricks include session resumption and HTTP/2 via ALPN. Practical fixes include the upgrade-insecure-requests header for mixed content. Evidence includes telemetry showing a visible uptick in HTTPS adoption and major services moving to encrypted traffic.
AI-written summary · about
chapters (4)
- 0:00Start
- 9:00Two ways to upgrade to HTTP/2
- 20:51Using the default Let's Encrypt client
- 21:58Make the Internet Great Again
related talks
43mEmerging Web Security Standards
58m25 Years of SSL - Secure(ish) Sockets Layer
44mKeeping the Watchers at Bay
37mHTTPS Is Better than Ever Before. Now Its Your Turn.
06mKeynote: Ten Years as a Free, Open, and Automated Certificate Authority
53mHansel and Gretel do TLS
40mWhirlwind tour through the HTTP2 spec
51mWeb Platform: The Secure Parts