32 ms·

Use StartSSL[1], or self-signed certificates if you just use HTTPS for admin access to some of your sites. You can easily find many online tutorials on how to s

by tomkwok 11y ago

Use StartSSL[1], or self-signed certificates if you just use HTTPS for admin access to some of your sites. You can easily find many online tutorials on how to setup TLS/SSL on your web server after a bit of googling, such as this one[2] on the DigitalOcean community site. P.S. Judging from your username, it seems like you have played agar.io too much. :) [1] http://www.startssl.com http://www.startssl.com [2] https://www.digitalocean.com/community/tutorials/how-to-set-up-apache-with-a-free-signed-ssl-certificate-on-a-vps https://www.digitalocean.com/community/tutorials/how-to-set-... Edit: If you can wait until November this year, use Let's Encrypt[3] when it is generally available to the public. At this moment you can also use CloudFlare, which provides free SSL branded as "Universal SSL" if you use their CDN. [3] https://letsencrypt.org/2015/08/07/updated-lets-encrypt-launch-schedule.html https://letsencrypt.org/2015/08/07/updated-lets-encrypt-laun...

FreeHugs 11y ago
Wow, StartSSL will give me a free certificate that browsers accept without bugging the user? Are there any downsides to this? Is that possible for the whole domain, so that when I get a cert for mydomain.com it also works for development.mydomain.com etc? Even when development.mydomain.com has a different IP then mydomain.com?
- tomkwok 11y ago
  The major downside I know is that in case your private key is compromised and you want to revoke the certificate, you have to pay $24.90. > Even though StartSSL™ provides certificates generally free of charge, revocations thereof may carry a handling fee. Take great care of your private keys, save and backup all files all the time! See more on https://www.startssl.com/?app=37 https://www.startssl.com/?app=37
  - nly 11y ago
    WoSign[0] do free revok and will give you up to 100 altnames. Failing that I'd rather pay $10 for a cert from somewhere else, or pay a premium for my domain at Gandi and get a cert thrown in. [0] https://buy.wosign.com/free/ https://buy.wosign.com/free/

by tomkwok 11y ago

FreeHugs 11y ago

Wow, StartSSL will give me a free certificate that browsers accept without bugging the user? Are there any downsides to this? Is that possible for the whole domain, so that when I get a cert for mydomain.com it also works for development.mydomain.com etc? Even when development.mydomain.com has a different IP then mydomain.com?

tomkwok 11y ago
The major downside I know is that in case your private key is compromised and you want to revoke the certificate, you have to pay $24.90. > Even though StartSSL™ provides certificates generally free of charge, revocations thereof may carry a handling fee. Take great care of your private keys, save and backup all files all the time! See more on https://www.startssl.com/?app=37 https://www.startssl.com/?app=37
- nly 11y ago
  WoSign[0] do free revok and will give you up to 100 altnames. Failing that I'd rather pay $10 for a cert from somewhere else, or pay a premium for my domain at Gandi and get a cert thrown in. [0] https://buy.wosign.com/free/ https://buy.wosign.com/free/