Monday 16 April 2018

Letsencrypt Google Chrome and blogger

Here's something new, my blogger site (on my personal domain) now has HTTPS support! This was added by Google, and has been something talked about for years.

The tricky part from Google's point of view is that this is on my own domain, so adding an HTTPS would normally involve certificate chains, authorisation from the domain owner to validate who you are, etc.
But it works! And looking into it, you can see how. The certificate is from Letsencrypt. This is a novel certification body that are completely free and willing to 'certify everyone', they do basic checks that you own the domain (Uploading a file to the website, changing your DNS records, etc) and then will issue a short-term certificate (A few months) so you need to keep re-certifying.
I've done this a few times on my own servers, and running a script to keep generating the certificate is easy enough.

So that seems to be how Google and Blogger are doing it, generating Letsencrypt certificates for the customer blog domains. This also gives further weight to letsencrypt knowing that one of the 'big boys' like Google are using them for blogger blog's.

So enjoy, and use my blog on HTTPS now https://www.thebmwz3.co.uk/

2 comments:

Note: only a member of this blog may post a comment.