Cloud Hosting

Ten years ago, the web was a very different place. Most websites didnt use HTTPS to protect your data. As a result, snoops could read emails or even take over accounts by stealing cookies. But a group of determined researchers and technologists from EFF and the University of Michigan were dreaming of a better world: one where every web page you visited was protected from spying and interference. Meanwhile, another group at Mozilla was working on the same dream. Those dreams led to the creation of Lets Encrypt and tools like EFFs Certbot, which simplify protecting websites and make browsing the web safer for everyone.

There was one big obstacle: to deploy HTTPS and protect a website, the people running that website needed to buy and install a certificate from a certificate authority. Price was a big barrier to getting more websites on HTTPS, but the complexity of installing certificates was an even bigger one.

In 2013, the Internet Security Research Group (ISRG) was founded, which would soon become the home of Lets Encrypt, a certificate authority founded to help encrypt the Web. Lets Encrypt was radical in that it provided certificates for free to anyone with a website. Lets Encrypt also introduced a way to automate away the risk and drudgery of manually issuing and installing certificates. With the new ACME protocol, anyone with a website could run software (like EFFs Certbot) that combined the steps of getting a certificate and correctly installing it.

In the time since, Lets Encrypt and Certbot have been a huge success, with over 250 million active certificates protecting hundreds of millions of websites.

This is a huge benefit to everyones online security and privacy. When you visit a website that uses HTTPS, your data is protected by encryption in transit, so nobody but you and the website operator gets to see it. That also prevents snoops from making a copy of your login cookies and taking over accounts.

The most important measure of Lets Encrypts and Certbots successes is how much of peoples daily web browsing uses HTTPS. According to Firefox data, 78% of pages loaded use HTTPS. Thats tremendously improved from 27% in 2013 when Lets Encrypt was founded. Theres still a lot of work to be done to get to 100%. We hope youll join EFF and Lets Encrypt in celebrating the successes of ten years encrypting the web, and the anticipation of future growth and safety online.

View post:
Celebrating Ten Years of Encrypting the Web with Let's Encrypt - EFF