Linux

24.2    Encrypted Connections (HTTPS)

In the default configuration, Apache either uses only the unencrypted HTTP protocol, or it performs the encryption required for HTTPS using a self-signed certificate. Both variants are rightly considered insecure by all major web browsers. If the web browser displays your pages at all, it will show a crossed-out lock or other security warnings in the address bar.

The solution is to use HTTPS in combination with a certificate. HTTPS combines the Hypertext Transfer Protocol (HTTP) and Secure Sockets Layer (SSL) protocols, adding encryption capabilities to HTTP.

You can obtain a suitable certificate for Apache free of charge from organizations such as Let's Encrypt or ZeroSSL. Alternatively, you can purchase ...