Next on HowHTTPS.works... Now that we know the why, the next step is to understand symmetric and asymmetric encryption. Big words, but easy concepts.

This article is a written version of the talk “HTTP headers for the responsible developer”. You can check the slides or the recording. Being online is the default state for many people these days.

Sometimes people want to get a certificate for the hostname “localhost”, either for use in local development, or for distribution with a native application that needs to communicate with a web application.

Before I get started with the how, I assume some of you may be asking, “Why do I care about running SSL on my localhost?” Well, there are some specific situations that you may care. Here are just a few: There may be others, but these are some that I have run into myself.

It's finally time: it's time the pendulum swings further towards the "secure by default" end of the scale than what it ever has before.