Does My Site Need HTTPS?
Yes, yes it does. Also see: istlsfastyet.com and h2setup.
I run a few sites, all over HTTPS, using SSL/TLS certificates from Let’s Encrypt:
- stouty.xyz - this site.
- git.stouty.xyz - my painless, self-hosted Git service.
cloud.stouty.xyz - my self-hosted Nextcloud instance.- hkwarnings.com - blog and server for HKWarnings.
They all get an A+ score on the Qualys SSL Lab test.
Certificates are renewed using Certbot, configured with the help of nginxconfig.io, and protected from bad bots by The Ultimate Nginx Bad Bot Blocker.