3 ms·
>I cannot stress enough how much more useful it is to either look up a good book on how to do it, or ask someone for help. Recommending books doesn't seem like
by nawitus 12y ago
>I cannot stress enough how much more useful it is to either look up a good book on how to do it, or ask someone for help.
Recommending books doesn't seem like a great idea when it comes to web security, as best practices change so often. Besides, enabling something like TLS should be easy. The more difficult it's to enable TLS, the less secure the web will be. In fact, since TLS is so difficult to set up, it's rather rarely used. If it was easier to set up, it would be more common and the web would be more secure on average.
- peterwwillis 12y agoWell first of all, setting up TLS has not really changed in 15 years. The protocol has evolved over time, and as a result of wanting the most number of people to use it as possible, it's not configured by default to be the most secure; it's designed to be the most compatible. The best practice is to install it, and then tighten security to your use case. Secondly, 'easy' is 100% subjective. To me it's incredibly easy to set up TLS. It wouldn't be easy to my grandma. But the same could be said for anything that takes technical expertise and a complex set of operations. TLS is not simple, and it will never be simple. People who understand how TLS works know this already.