Introduction

A cer­tifi­cate is an elec­tron­ic file that allows for secure trans­ac­tions by encrypt­ing the con­cerned data and iden­ti­fy­ing the par­ty with whom we are hav­ing a transaction/conversation. More con­crete­ly, in our case, when you vis­it a site con­fig­ured with a cer­tifi­cate, you are sent to the var­i­ous pages using the HTTPS pro­to­col (a secure HTTP pro­to­col) and your brows­er can dis­play for you infor­ma­tion regard­ing the iden­ti­ty of the site’s edi­tor thanks to the cer­tifi­cate that they set up in advance.

HTTPS sur alwaysdata.com

In short, HTTPS means that:

  • data is encrypt­ed
  • the web­site is iden­ti­fied

Enter Let’s Encrypt

Certificated are obtained from a cer­ti­fi­ca­tion author­i­ty, and for this there may be asso­ci­at­ed costs, which will depend on the type of cer­tifi­cate required (there are sev­er­al lev­els of guar­an­tees, as in when you are buy­ing insur­ance). This is where Let’s Encrypt comes in: intro­duced about a year ago, this cer­ti­fi­ca­tion author­i­ty is fund­ed by major play­ers on the web and offers free and easy cer­tifi­cate gen­er­a­tion.

Benefits:

Drawbacks:

  • no cer­tifi­cate wild­cards (such as *.mydomain.fr, that is, which applies to all sub­do­mains at once)
  • cer­tifi­cate valid­i­ty is lim­it­ed to 90 days (this issue is dis­cussed in this arti­cle)

Configuration using alwaysdata

Thanks to the sim­plic­i­ty and qual­i­ty of the ser­vices pro­vid­ed by Let’s Encrypt, we’ve added a great fea­ture to always­da­ta: from now on, all your sites will be able to work using HTTPS, auto­mat­i­cal­ly and at no extra cost. Yes, you read that right!

Essentially, for every site address that you con­fig­ure using the always­da­ta inter­face, a Let’s Encrypt cer­tifi­cate is gen­er­at­ed with­in a few sec­onds. And the 3 month renew­al? No need to wor­ry, that is also auto­mat­i­cal­ly tak­en care of.

Force HTTPS

Of course, you may also keep brows­ing your site using HTTP, but just be aware that HTTPS can also be used by default, so if you wish your site to always be browsed secure­ly, all you have to do is tick a box. Easy, right?

Edit (28/11/2016)

The Let’s Encrypt cer­tifi­cates for your web sites address­es are present­ly being gen­er­at­ed and will appear in the next few days under the SSL Certificates > Self-gen­er­at­ed cer­tifi­cates sec­tion.