{"id":430,"date":"2021-03-06T09:57:32","date_gmt":"2021-03-06T09:57:32","guid":{"rendered":"https:\/\/rejupillai.com\/?p=430"},"modified":"2026-04-13T00:08:36","modified_gmt":"2026-04-13T00:08:36","slug":"configure-tls-on-gke-ingress-for-free-with-lets-encrypt","status":"publish","type":"post","link":"https:\/\/rejupillai.com\/index.php\/2021\/03\/06\/configure-tls-on-gke-ingress-for-free-with-lets-encrypt\/","title":{"rendered":"Let’s Encrypt the Web (for free)"},"content":{"rendered":"\n
\"\"<\/figure>\n\n\n\n

Can you remember last time you browsed a website that said “Not Secure” on the URL address bar ? If you are a smart internet user, my guess is that it must have been a long time ago. Though you mayn’t exchange any information, sensitive or otherwise, and regardless of the website being transactional or informational, it just doesn’t give the comfort and trust to visit and further browse the site. <\/p>\n\n\n\n

This blog post will focus on securing HTTP connections for a workload running on GKE using Cert-Manager and Lets-encrypt service as the free SSL provider. <\/p>\n\n\n\n

And don’t worry, the site you are reading this blog on, is secured \ud83d\ude42<\/p>\n\n\n\n

Why https ?<\/h2>\n\n\n\n

TLS<\/a> encrypts your data exchanged b\/w browser and server over the public internet, a.k.a “the web”, which can be a very insecure place, prone to man-in-the-middle<\/a> attacks. But without possession of the private key used to encrypt the data, it is almost impossible to make any sense even if you get hold of that gibberish data. TLS Certificates are the most commonly used PKI<\/a> on the web and it’s very hard to break when the bit-size of the encryption algorithm is large, see an old tweet, why ?<\/p>\n\n\n\n

\n

Prime factorization challenge.

Wonder why we put OpenSSL #RSA<\/a> encryption with bitsize of 1024 or 2048 ?

The highest factors anyone has deduced till date is 829 bits.

A 64bit key can be found in less than a sec, and a 1024 would require 30 years or more for a normal computer pic.twitter.com\/INN43JXyJS<\/a><\/p>— Reju Pillai (@reju_pillai) July 5, 2020<\/a><\/blockquote>