Tag / Let’s Encrypt

  • February 23, 2016 - Tom Hacohen

    Running letsencrypt as an Unprivileged User

    Running letsencrypt as an unprivileged user (non-root) is surprisingly easy, and even more surprisingly undocumented. There is no mention in the official documentation, nor was I able to find anything online. There are alternative clients that were designed to be run as unprivileged, but they are not as beginner-friendly as the official one. Personally, I’ve switched to acme-tiny (and created an AUR package for it). Its much smaller and lets me have an even more secure setup. Why would you want to bother with this? One word: security. You should always strive to run every process with the lowest privileges possible because this reduces the chances of data loss as a result of a bug. More importantly, this reduces the chances of your server being compromised and thus improves overall security. Summary In this tutorial we will setup letsencrypt to run as an unprivileged user using the webroot plugin. This […]

    Read More
  • The usage of https has been so far somewhat restricted on open source projects, because of the cost of acquiring and maintaining certificates. As a result of this and the need to improve Internet security, several projects are working on providing free valid certificates. Among those projects, Let’s Encript launched a public beta last week on December, 3 2015. The Let’s Encrypt Approach Let’s Encrypt is a Linux Foundation Collaborative project that started to fulfill an Electronic Frontier Foundation – EFF long-term mission to Encrypt the Web. According with EFF, the “aim is to switch hypertext from insecure HTTP to secure HTTPS. That protection is essential in order to defend Internet users against surveillance of the content of their communications; cookie theft, account hijacking and other web security flaws; cookie and ad injection; and some forms of Internet censorship.”. With that goal in mind, the Let’s Encrypt project is providing […]

    Read More
  • November 13, 2015 - Samsung Open Source Group

    A New AI, Medical Robots, and More in This Week’s Wrap Up

    Open Source Wrap Up: November 7 -13, 2015 Google Releases Open Source AI Engine: TensorFlow Google has released TensorFlow, deep learning that is used in many of the company’s products, as open source. The software uses a library for numerical computation inside data flow graphs that pass dynamically sized, multi-dimensional arrays, called tensors, between nodes. The nodes perform processing asynchronously, in parallel once all tensors on their incoming edges become available. This design makes TensorFlow flexible and portable as it is relatively simple to reconstruct data flow graphs and use high-level programming languages to develop new computational systems. Google has used this to connect artificial intelligence research with product teams that build new products that use this software. By releasing it as open source, the company hopes to bring more people into this convergence effort and standardize the set of tools people rely on for this work. To learn more, […]

    Read More
  • Open Source Wrap Up: October 17 – 23, 2015 Red Hat Acquires Ansible Red Hat has long been one of the most successful businesses in the open source industry, and part of their success has been the strategic purchases of companies that develop leading technology. One such recent technology is Ansible: a platform for IT automation and DevOps. Ansible has slowly emerged as the leader in a field full of stiff competition; this acquisition illustrates just how important Ansible has become. Recently, Red Hat has been investing significant time and money in the development of containers and their use in the cloud, and this acquisition will certainly expand their development efforts. Read the announcement here. France Citizens Open the Door for Open Source Following 20 days of public debate and more than 147,000 votes and 8,500 proposals, the French citizens have approved the Digital Republic Bill. This bill covers a […]

    Read More
  • September 18, 2015 - Samsung Open Source Group

    Come Get Your SSL/TLS Encryption and More, in This Week’s Wrap Up

    Open Source Wrap Up: September 12-18, 2015 Let’s Encrypt Issues First SSL/TLS Certificate. Let’s Encrypt is a Linux Foundation Collaborative project that will serve as a certificate authority that makes SSL/TLS certificate provisioning much simpler. The project will distribute free SSL/TLS certificates, which will simplify the process of setting up encrypted communications over the web; this is something many leading tech companies have been pushing for heavily in recent years. The first certificate has been issued to their own test website; currently it requires visitors to install an ISRG root certificate, but the project is working with IdenTrust, a certificate authority, to cross sign the project’s certificates. Once this process is finished, all certificates issued by Let’s Encrypt will be trusted across the web. The project will gradually roll more certificates out to pre-selected websites in the coming weeks before opening up the process to the general public on November […]

    Read More