Autosave: 2025-02-10 17:14:11

neuron/ac6779a0-333b-484d-8504-e6927d39c983/Let's_Encrypt.md

@@ -1,6 +0,0 @@
----
-tags: []
-created: Sunday, February 09, 2025
----
-
-# Let's_Encrypt

neuron/f8981ab1-f587-4bd7-a1a8-aa934a221168/Firewalls.md

@@ -42,3 +42,17 @@ process.
 
 Another usefule software is Fail2ban which can automatically configure your
 firewall to block brute force login attempts and DDOS attacks.
+
+## Difference from reverse proxies
+
+Whilst both reverse proxies and firewalls filter incoming traffic to a server,
+there are important differences.
+
+The firewall operates at the
+[Transport Layer](Transport_Layer_of_Internet_Protocol.md) wehreas proxies
+operate at the [Application Layer](Application_Layer_of_Internet_Protocol.md).
+
+The firewall is primarily concerned with security and precedes anything that
+happens with the incoming packets at the Appplication Layer. The packets first
+have to get through the firewall before the request can be routed to a specific
+service on the server.

neuron/f8981ab1-f587-4bd7-a1a8-aa934a221168/Let's_Encrypt.md

@@ -0,0 +1,22 @@
+---
+tags: [networks, server-management, encryption]
+created: Sunday, February 09, 2025
+---
+
+# Let's Encrypt
+
+ACME (Automatic Certificate Management Environment) is an open source protocol
+that automates the process of obtaining and renewing SSL/TLS certificates.
+
+Let's Encrypt (LE) created this protocol and uses it to issue certificates.
+
+Certbot is a popular ACME client that communicates with the LE servers to
+
+- validate domain ownership
+- request certificates
+- install the certificates on the web server
+- handle automatic renewals
+
+Let's Encrypt was founded by the
+[Internet Security Research Group](https://www.abetterinternet.org/). Certbot
+was created independently by the EFF and is maintained by them.

neuron/f8981ab1-f587-4bd7-a1a8-aa934a221168/index.md

@@ -13,15 +13,15 @@ computer science.
 
 <a href="https://thomasabishop.github.io/eolas/tags">View tags</a>
  
-**Build ID:** ac6779a0-333b-484d-8504-e6927d39c983
+**Build ID:** f8981ab1-f587-4bd7-a1a8-aa934a221168
 
-**Published:** Sun 09 Feb 2025 13:31:39
+**Published:** Mon 10 Feb 2025 17:14:06
 
 ### Recent edits 
 
-- [[Certificate_authorities]] 
-- [[Let's_Encrypt]] 
 - [[Firewalls]] 
+- [[Let's_Encrypt]] 
+- [[Certificate_authorities]] 
 - [[HTTPS]] 
 - [[Bash_colour_output]] 
 - [[e383b8b3_nginx_vs_traefik]] 

neuron/f8981ab1-f587-4bd7-a1a8-aa934a221168/tags.md

@@ -368,6 +368,7 @@ unlisted: true
 - [[a4601796_trapdoor_functions]] 
 - [[bbdcb54f_public_key_cryptography]] 
 - [[HTTPS]] 
+- [[Let's_Encrypt]] 
 - [[What_can_the_ISP_see]] 
 ### exponents 
 
@@ -679,6 +680,7 @@ unlisted: true
 - [[Internet_fundamentals]] 
 - [[Internet_Layer_of_Internet_Protocol]] 
 - [[IP_addresses]] 
+- [[Let's_Encrypt]] 
 - [[Link_Layer_of_Internet_Protocol]] 
 - [[MAC_addresses]] 
 - [[Monitor_DNS_resolution_and_internet_connectivity_script]] 
@@ -1010,6 +1012,7 @@ unlisted: true
 - [[Certificate_authorities]] 
 - [[Firewalls]] 
 - [[HTTPS]] 
+- [[Let's_Encrypt]] 
 ### set-theory 
 
 - [[Axioms_of_set_theory]] 

zk/Firewalls.md

@@ -42,3 +42,17 @@ process.
 
 Another usefule software is Fail2ban which can automatically configure your
 firewall to block brute force login attempts and DDOS attacks.
+
+## Difference from reverse proxies
+
+Whilst both reverse proxies and firewalls filter incoming traffic to a server,
+there are important differences.
+
+The firewall operates at the
+[Transport Layer](./Transport_Layer_of_Internet_Protocol.md) wehreas proxies
+operate at the [Application Layer](./Application_Layer_of_Internet_Protocol.md).
+
+The firewall is primarily concerned with security and precedes anything that
+happens with the incoming packets at the Appplication Layer. The packets first
+have to get through the firewall before the request can be routed to a specific
+service on the server.

zk/Let's_Encrypt.md

@@ -1,6 +1,22 @@
 ---
-tags: []
+tags: [networks, server-management, encryption]
 created: Sunday, February 09, 2025
 ---
 
-# Let's_Encrypt
+# Let's Encrypt
+
+ACME (Automatic Certificate Management Environment) is an open source protocol
+that automates the process of obtaining and renewing SSL/TLS certificates.
+
+Let's Encrypt (LE) created this protocol and uses it to issue certificates.
+
+Certbot is a popular ACME client that communicates with the LE servers to
+
+- validate domain ownership
+- request certificates
+- install the certificates on the web server
+- handle automatic renewals
+
+Let's Encrypt was founded by the
+[Internet Security Research Group](https://www.abetterinternet.org/). Certbot
+was created independently by the EFF and is maintained by them.