cc_staff
1,486
edits
(Added a bit about self-signed certs vrs 3rd party signing authorities, also to recommended checking using ssllabs ssltest tool.) |
m (clarification about certbot docs) |
||
Line 13: | Line 13: | ||
==Signed Certificate== <!--T:9--> | ==Signed Certificate== <!--T:9--> | ||
Having a certificate signed by a [https://en.wikipedia.org/wiki/Certificate_authority Certificate Authority] (CA) allows visitors of the site to verify by a third party (the CA) that the website is the expected website, avoiding [https://en.wikipedia.org/wiki/Man-in-the-middle_attack man-in-the-middle-attacks]. Many CAs require a yearly fee; one CA which does not is the [https://letsencrypt.org/ let's encrypt] CA. | Having a certificate signed by a [https://en.wikipedia.org/wiki/Certificate_authority Certificate Authority] (CA) allows visitors of the site to verify by a third party (the CA) that the website is the expected website, avoiding [https://en.wikipedia.org/wiki/Man-in-the-middle_attack man-in-the-middle-attacks]. Many CAs require a yearly fee; one CA which does not is the [https://letsencrypt.org/ let's encrypt] CA. Certbot is a tool for automatically creating and renewing an SSL certificate signed by the let's encrypt CA and automatically configures your web server to use the SSL certificate. The main [https://certbot.eff.org/ Certbot] page tells you everything you need to know to get started quickly. For additional details about using cerbot see the [https://certbot.eff.org/docs/ certbot docs]. | ||
==Self-Signed Certificate== <!--T:10--> | ==Self-Signed Certificate== <!--T:10--> |