HTTPS and SSL certificates in Express - Cheat Sheet & Quick Revision

Recall & Review

beginner

What does HTTPS stand for and why is it important?

HTTPS stands for HyperText Transfer Protocol Secure. It encrypts data between the browser and server, keeping information safe from eavesdroppers.

beginner

What is an SSL certificate in the context of Express apps?

An SSL certificate is a digital file that proves a website's identity and enables encrypted connections using HTTPS in Express apps.

intermediate

How do you enable HTTPS in an Express server?

You create an HTTPS server using Node's https module with your SSL certificate and key, then pass your Express app to it.

intermediate

Why should you never use self-signed SSL certificates in production?

Self-signed certificates are not trusted by browsers, causing security warnings. Production sites need certificates from trusted authorities.

intermediate

What role does the private key play in SSL certificates?

The private key is kept secret on the server and is used to decrypt data encrypted by clients and to prove the server's identity.

Which Node.js module is used to create an HTTPS server in Express?

A tls

B http

C https

D express-ssl

The https module is used to create HTTPS servers, which can wrap an Express app.

What files do you need to enable HTTPS in Express?

A Certificate and private key files

B Only the certificate file

C Only the private key file

D No files needed

You need both the SSL certificate and the private key to enable HTTPS.

What happens if you use a self-signed certificate in a browser?

A Connection is fully trusted

B Browser shows a security warning

C Browser blocks the site completely

D Browser automatically trusts it

Browsers warn users because self-signed certificates are not from trusted authorities.

Why is HTTPS preferred over HTTP?

A It encrypts data for security

B It loads pages faster

C It uses less bandwidth

D It allows more users

HTTPS encrypts data, protecting user information from attackers.

In Express, which method is used to create a server that supports HTTPS?

A http.createServer()

B express.createHttps()

C express.https()

D https.createServer()

The https.createServer() method creates an HTTPS server that can use an Express app.

Explain how to set up HTTPS in an Express application using SSL certificates.

Think about the files needed and the Node module to create the server.

Describe why SSL certificates are important for web security and user trust.

Consider what happens when data is sent over the internet.