Skip to main content

Using HTTPS to encrypt the client-server connection



One Paragraph Explainer

Using services such as Let'sEncrypt, a certificate authority which provides free SSL/TLS certificates, can help encrypt the communication of your applications. Node.js frameworks like Express (based on the core https module) support SSL/TLS, which can be implemented in a few lines of code.

You can also configure SSL/TLS on a reverse proxy, such as NGINX or HAProxy.



Code Example – Enabling SSL/TLS using the Express framework

const express = require('express');
const https = require('https');
const app = express();
const options = {
// The path should be changed accordingly to your setup
cert: fs.readFileSync('./sslcert/fullchain.pem'),
key: fs.readFileSync('./sslcert/privkey.pem')
};
https.createServer(options, app).listen(443);