How do I install the Https skill?

Run npx skillmds@latest add ffsshhttiikk/https in your terminal (requires Node.js), paste this page's agent-chat prompt into Claude, Cursor, or any MCP-connected agent, or download the SKILL.md file and copy it into your agent's skills directory.

What does the Https skill do?

HTTPS and TLS security It is listed under Security on SkillMD.

Is Https safe to use?

This skill has not completed SkillMD's automated safety review yet. SkillMD never runs a skill's scripts for you; review the SKILL.md before installing.

Which AI agents work with Https?

This skill is tagged as working with Claude Code, Claude.ai, OpenAI Codex. SKILL.md is an open format, so most agents that read a skills directory can load it too.

Is Https free to use?

Yes. Installing skills from SkillMD is free. This skill is licensed under MIT.

ffsshhttiikk (@ffsshhttiikk) published this skill. Their other Agent Skills are listed on their SkillMD profile.

Https by ffsshhttiikk — Agent Skill

Name: Https
Author: ffsshhttiikk

File contents

What I do

Implement HTTPS/TLS for web applications
Configure SSL/TLS certificates
Enable HTTP Strict Transport Security (HSTS)
Set up certificate pinning
Optimize TLS handshake performance
Implement modern cipher suites
Handle mixed content issues

When to use me

Use me when:

Securing web application communications
Configuring web servers for HTTPS
Implementing certificate management
Fixing mixed content warnings
Setting up modern TLS configurations
Protecting against man-in-the-middle attacks

Key Concepts

TLS Handshake Process

Client                        Server
  │                              │
  │──── ClientHello ────────────▶│
  │                              │
  │◀─── ServerHello + Cert ──────│
  │◀─── ServerKeyExchange ───────│
  │◀─── CertificateRequest ─────│
  │                              │
  │──── ClientKeyExchange ──────▶│
  │──── CertificateVerify ──────▶│
  │──── ChangeCipherSpec ────────▶│
  │──── Finished ───────────────▶│
  │                              │
  │◀─── ChangeCipherSpec ────────│
  │◀─── Finished ────────────────│
  │                              │
  │════════ Encrypted Data ═════│

Certificate Types

DV: Domain Validation (basic)
OV: Organization Validation
EV: Extended Validation (green bar)
Let's Encrypt: Free, automated DV

Modern TLS Configuration

# Nginx TLS configuration
server {
    listen 443 ssl http2;
    
    ssl_certificate /etc/ssl/certs/server.crt;
    ssl_certificate_key /etc/ssl/private/server.key;
    
    # Modern TLS
    ssl_protocols TLSv1.3;
    ssl_ciphers ECDHE-ECDSA-AES128-GCM-SHA256:ECDHE-RSA-AES128-GCM-SHA256;
    ssl_prefer_server_ciphers on;
    
    # HSTS
    add_header Strict-Transport-Security "max-age=63072000" always;
    
    # OCSP Stapling
    ssl_stapling on;
    ssl_stapling_verify on;
}

Security Headers

HSTS: Forces HTTPS connections
CSP: Content Security Policy
Certificate Pinning: Prevents MITM

---name: httpsdescription: HTTPS and TLS securitylicense: MIT---## What I do- Implement HTTPS/TLS for web applications- Configure SSL/TLS certificates- Enable HTTP Strict Transport Security (HSTS)- Set up certificate pinning- Optimize TLS handshake performance- Implement modern cipher suites- Handle mixed content issues## When to use meUse me when:- Securing web application communications- Configuring web servers for HTTPS- Implementing certificate management- Fixing mixed content warnings- Setting up modern TLS configurations- Protecting against man-in-the-middle attacks## Key Concepts### TLS Handshake Process```Client Server │ │ │──── ClientHello ────────────▶│ │ │ │◀─── ServerHello + Cert ──────│ │◀─── ServerKeyExchange ───────│ │◀─── CertificateRequest ─────│ │ │ │──── ClientKeyExchange ──────▶│ │──── CertificateVerify ──────▶│ │──── ChangeCipherSpec ────────▶│ │──── Finished ───────────────▶│ │ │ │◀─── ChangeCipherSpec ────────│ │◀─── Finished ────────────────│ │ │ │════════ Encrypted Data ═════│```### Certificate Types- **DV**: Domain Validation (basic)- **OV**: Organization Validation- **EV**: Extended Validation (green bar)- **Let's Encrypt**: Free, automated DV### Modern TLS Configuration```nginx# Nginx TLS configurationserver { listen 443 ssl http2; ssl_certificate /etc/ssl/certs/server.crt; ssl_certificate_key /etc/ssl/private/server.key; # Modern TLS ssl_protocols TLSv1.3; ssl_ciphers ECDHE-ECDSA-AES128-GCM-SHA256:ECDHE-RSA-AES128-GCM-SHA256; ssl_prefer_server_ciphers on; # HSTS add_header Strict-Transport-Security "max-age=63072000" always; # OCSP Stapling ssl_stapling on; ssl_stapling_verify on;}```### Security Headers- HSTS: Forces HTTPS connections- CSP: Content Security Policy- Certificate Pinning: Prevents MITM

Frequently asked questions

Https