36. What is HTTPS?

HTTPS (Hypertext Transfer Protocol Secure) is the secure version of HTTP, used for secure communication over the Internet. HTTPS encrypts data transmitted between the browser and the server, ensuring confidentiality and integrity.

Advantages of HTTPS:

1. Security: Encrypts data transmitted between the client and server, protecting it from eavesdropping and man-in-the-middle attacks.
2. Data integrity: Ensures that data has not been altered during transmission, protecting against tampering.
3. Authentication: Confirms the identity of the server, helping to prevent phishing attacks and website spoofing.
4. User trust: Websites using HTTPS gain more user trust, which can improve user experience and increase conversions.
5. SEO: Search engines like Google favor HTTPS websites, which can improve the site's ranking in search results.

Example of HTTPS configuration using Nginx:

server {
    listen 443 ssl;
    server_name example.com;

    ssl_certificate /etc/ssl/certs/example.com.crt;
    ssl_certificate_key /etc/ssl/private/example.com.key;

    location / {
        proxy_pass http://localhost:3000;
        proxy_set_header Host $host;
        proxy_set_header X-Real-IP $remote_addr;
        proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
        proxy_set_header X-Forwarded-Proto $scheme;
    }
}

To obtain an SSL certificate, you can use free services like Let's Encrypt.

HTTPS is an essential element of modern websites, providing security and user trust.