WeChat ID
aaronpk_tv
#https
-
Better Default Security for IndieAuth Login Forms
Last year, I posted a JavaScript snippet that I've started using in all my projects that have an IndieAuth login form, which will automatically add the http scheme if you type a plain domain. This is particularly a problem because the iOS keyboard doesn't include the : character in URL mode.continue reading... -
Day 80: Replaced my HTTPS Certificates #100DaysOfIndieWeb
Normally I wouldn't have let this kind of change qualify for my #100Days project, but I was blocked from using any of my indieweb tools, and I feel like there's a good lesson here.continue reading... -
Nice follow-up to @CloudFlare's disaster bug by @1Password ♥️🔐 https://blog.agilebits.com/2017/02/23/three-layers-of-encryption-keeps-you-safe-when-ssltls-fails/ Keep being awesome, 1Password! -
This is perhaps the first step in the fall of certificate authorities in favor of p2p root CA trust sharing. https://twitter.com/FiloSottile/status/735940720931012608
-
I wrote about my relatively painless process of getting an https cert using letsencrypt! http://aaronparecki.com/articles/2015/12/07/1/letsencrypt
-
Setting up HTTPS with Letsencrypt.org
I use nginx to serve my HTTPS domains, and Letsencrypt support for nginx is still in beta. I also have a relatively specialized nginx config setup so I don't want any automated script messing with those files. Below are the steps I took to use the letsencrypt tool to generate and automatically renew a certificate for a domain.continue reading...
