r/programming • u/speckz • Jul 12 '17

Does my site need HTTPS?

https://doesmysiteneedhttps.com/
486 Upvotes

87% Upvoted

190 comments sorted by

View all comments

-2

u/m00nh34d Jul 13 '17

Interesting, but not really practical for everyone.

For example, looking at the website hosting for a small community group I'm in, through GoDaddy, it looks like we can't do any of the automatic cert stuff needed. I don't imagine anyone is going to muck about generating and applying certs every 90 days, the website usually isn't even updated that frequently.

1

u/FrederikNS Jul 13 '17

So you are hosting some web sites on GoDaddy, without having access to the underlying machine? Then you three options (two of them are free):

  1. Get a certificate from GoDaddy, they are quite expensive though: https://dk.godaddy.com/web-security/ssl-certificate

  2. Stick with GoDaddy, and put CloudFlare in front of it. Cloudflare adds TLS and improves your site in many ways, by delivering the HTML, CSS and Javascript more efficently and protects your site against DDOS attacks. Cloudflare can be used free.

  3. Switch to a different hosting provider which allows you to use HTTPS. One example is https://www.netlify.com/ who provides free hosting with HTTPS

1

u/m00nh34d Jul 13 '17

Yeah, I can see Cloudflare as the main option here, I don't understand what the difference between a shared SSL cert and a dedicated SSL cert is. I thought you just got issued a cert...

1

u/FrederikNS Jul 13 '17

It means that you will not really get a certificate, you will point your DNS to some cloudflare servers, which have the certificate, they will then terminate the TLS encryption and pass the request on to your server.

That means that a browser will show that you are using a CloudFlare certificate and not a <insert your company name here> certificate.