DEV Community

Discussion on: Node, Express, SSL Certificate: Run HTTPS Server from scratch in 5 steps

Collapse
 
spock123 profile image
Lars Rye Jeppesen

Personally I would avoid handling certs in Node, if possible.. that stuff should be handled by the webserver forwarding traffic to your Node application.

Collapse
 
omergulen profile image
Ömer Gülen

Can you give further details about your reasons, please? I would like to learn more about the reason behind it.

Collapse
 
spock123 profile image
Lars Rye Jeppesen

Hi, sorry for my late reply.
So there are a lot of reasons for taking out certificate handling from your application.

I could list many of the reasons here, but it's easier for me to refer to this article which explains lots of the issues: medium.com/intrinsic/why-should-i-...

tldr; :

  • use a reverse proxy to send requests to your Node application
  • let the proxy handle certificates
  • this scales much better (think multiple servers)
  • performance is better (check benchmarks, it's remarkable)
  • enables easier http->https handling
Thread Thread
 
omergulen profile image
Ömer Gülen

Thanks for your further explanation, I will check them out!