Implementing https on site

Implementing SSL security on a website is now quite easy -- and free, using the Let's Encrypt free and automated certificate authority.

The process is well described here which takes you through the setup of the certificate and implementing it on an apache website. It includes setting up auto-renewal, to guarantee fresh certificates at all times.

A final step, forcing all web traffic to the secure (https) server using apache's redirect (not rewrite) rule is described here.

All in all, the process took no more than a couple of hours, including a few redos along the way with typical first-time mistakes.