journal features

let's encrypt for free certificates

the journal of Michael Werneburg

twenty-seven years and one million words

Toronto, 2018.09.05

I've now put SSL encryption on all four of my websites. I don't know if that makes them more secure* but given what I do for a living, it really makes sense for the appearance, given that the browsers are starting to flag anything without encryption as insecure!

Especially since reputable and widely supported certificates are now available for free in an automated fashion. It's all nicely encapsulated on the "Let's Encrypt" website. Let's Encrypt is an initiative founded by the Electronic Freedom Foundation and others in the industry. Their certificates are, as of last month, accepted even by Microsoft, so they're prime-time. What's particularly interesting is that they've completely automated their process for certificate installation and renewal, so you can obtain a certificate and keep it up to date with a simple cron job. Child's play.

*There are no transactions, and I ask for no sensitive data being input. Also, I've seen commercial products that can apparently scan content supposedly encrypted end to end by SSL.

rand()m quote

... I'll let you in on a secret. Big people are exactly the same as little people. They're selfish, squabbling children whose motivations are jealousy and greed. No one becomes big when the hit adulthood. They just become better at hiding how small they are.

—Jonathan Rosenberg