Any responsible site that accepts passwords, form responses, or other user data must use HTTPS.
If you’re hosting your site with NearlyFreeSpeech.NET, it is very easy to set up a TLS cert and HTTPS. Here’s how:
- Connect to your website via a SSH client like PuTTY.
- Run the command tls-setup.sh
- Accept the Let’s Encrypt Subscriber Agreement by entering “y”
- Wait while the script sets up the TLS cert and HTTPS
(Please note that other hosts will not have the tls-setup.sh script. These steps will only work on sites hosted with NFS.NET)