מאי 08

How It Works – Let’s Encrypt – Free SSL/TLS Certificates

The objective of Let’s Encrypt and the ACME protocol is to make it possible to set up an HTTPS server and have it automatically obtain a browser-trusted certificate, without any human intervention. This is accomplished by running a certificate management agent on the web server.

Let’s Encrypt is a free, automated, and open certificate authority brought to you by the Internet Security Research Group (ISRG). ISRG is a California public benefit corporation, and is recognized by the IRS as a tax-exempt organization under Section 501(c)(3) of the Internal Revenue Code. ISRG’s mission is to reduce financial, technological, and education barriers to secure communication over the Internet.

מקור: How It Works – Let’s Encrypt – Free SSL/TLS Certificates

יול 28

What’s Your HTTPS Grade? A Case Study of HTTPS/SSL at Mid Michigan Community College

What’s Your HTTPS Grade? A Case Study of HTTPS/SSL at Mid Michigan Community College

  • Why is SSL important?
    • Users reuse passwords across sites outside of your institution
    • Why have SSL enabled on Moodle? Don’t let Moodle be your weakest link.
  • Just having SSL isn’t enough — what’s your grade?
    • Qualys SSL tool
  • Overview of recent SSL vulnerabilities (POODLE, Heartbleed, etc.)
  • Sample configuration for protecting against these vulnerabilities
    • Apache
    • Nginx

read more…

מקור: MoodleMoot US 2015: Presentations