File contents What I do
Implement HTTPS/TLS for web applications
Configure SSL/TLS certificates
Enable HTTP Strict Transport Security (HSTS)
Set up certificate pinning
Optimize TLS handshake performance
Implement modern cipher suites
Handle mixed content issues
When to use me
Use me when:
Securing web application communications
Configuring web servers for HTTPS
Implementing certificate management
Fixing mixed content warnings
Setting up modern TLS configurations
Protecting against man-in-the-middle attacks
Key Concepts
TLS Handshake Process
Client Server
│ │
│──── ClientHello ────────────▶│
│ │
│◀─── ServerHello + Cert ──────│
│◀─── ServerKeyExchange ───────│
│◀─── CertificateRequest ─────│
│ │
│──── ClientKeyExchange ──────▶│
│──── CertificateVerify ──────▶│
│──── ChangeCipherSpec ────────▶│
│──── Finished ───────────────▶│
│ │
│◀─── ChangeCipherSpec ────────│
│◀─── Finished ────────────────│
│ │
│════════ Encrypted Data ═════│
Certificate Types
DV : Domain Validation (basic)OV : Organization ValidationEV : Extended Validation (green bar)Let's Encrypt : Free, automated DV
Modern TLS Configuration
# Nginx TLS configuration
server {
listen 443 ssl http2;
ssl_certificate /etc/ssl/certs/server.crt;
ssl_certificate_key /etc/ssl/private/server.key;
# Modern TLS
ssl_protocols TLSv1.3;
ssl_ciphers ECDHE-ECDSA-AES128-GCM-SHA256:ECDHE-RSA-AES128-GCM-SHA256;
ssl_prefer_server_ciphers on;
# HSTS
add_header Strict-Transport-Security "max-age=63072000" always;
# OCSP Stapling
ssl_stapling on;
ssl_stapling_verify on;
}
Security Headers
HSTS: Forces HTTPS connections
CSP: Content Security Policy
Certificate Pinning: Prevents MITM
1 --- 2 name: https 3 description: HTTPS and TLS security 4 license: MIT 5 --- 6 7 ## What I do 8 9 - Implement HTTPS/TLS for web applications 10 - Configure SSL/TLS certificates 11 - Enable HTTP Strict Transport Security (HSTS) 12 - Set up certificate pinning 13 - Optimize TLS handshake performance 14 - Implement modern cipher suites 15 - Handle mixed content issues 16 17 ## When to use me 18 19 Use me when: 20 - Securing web application communications 21 - Configuring web servers for HTTPS 22 - Implementing certificate management 23 - Fixing mixed content warnings 24 - Setting up modern TLS configurations 25 - Protecting against man-in-the-middle attacks 26 27 ## Key Concepts 28 29 ### TLS Handshake Process 30 ``` 31 Client Server 32 │ │ 33 │──── ClientHello ────────────▶│ 34 │ │ 35 │◀─── ServerHello + Cert ──────│ 36 │◀─── ServerKeyExchange ───────│ 37 │◀─── CertificateRequest ─────│ 38 │ │ 39 │──── ClientKeyExchange ──────▶│ 40 │──── CertificateVerify ──────▶│ 41 │──── ChangeCipherSpec ────────▶│ 42 │──── Finished ───────────────▶│ 43 │ │ 44 │◀─── ChangeCipherSpec ────────│ 45 │◀─── Finished ────────────────│ 46 │ │ 47 │════════ Encrypted Data ═════│ 48 ``` 49 50 ### Certificate Types 51 - **DV**: Domain Validation (basic) 52 - **OV**: Organization Validation 53 - **EV**: Extended Validation (green bar) 54 - **Let's Encrypt**: Free, automated DV 55 56 ### Modern TLS Configuration 57 ```nginx 58 # Nginx TLS configuration 59 server { 60 listen 443 ssl http2; 61 62 ssl_certificate /etc/ssl/certs/server.crt; 63 ssl_certificate_key /etc/ssl/private/server.key; 64 65 # Modern TLS 66 ssl_protocols TLSv1.3; 67 ssl_ciphers ECDHE-ECDSA-AES128-GCM-SHA256:ECDHE-RSA-AES128-GCM-SHA256; 68 ssl_prefer_server_ciphers on; 69 70 # HSTS 71 add_header Strict-Transport-Security "max-age=63072000" always; 72 73 # OCSP Stapling 74 ssl_stapling on; 75 ssl_stapling_verify on; 76 } 77 ``` 78 79 ### Security Headers 80 - HSTS: Forces HTTPS connections 81 - CSP: Content Security Policy 82 - Certificate Pinning: Prevents MITM
NeuralBlitz/Agent-Gateway/tree/main/agent-gateway/skills/user/https commit e1b3d5a974
Frequently asked questions How do I install the Https skill? Run npx skillmds@latest add neuralblitz/https in your terminal (requires Node.js), paste this page's agent-chat prompt into Claude, Cursor, or any MCP-connected agent, or download the SKILL.md file and copy it into your agent's skills directory.
What does the Https skill do? HTTPS and TLS security It is listed under AI & ML on SkillMD.
Is Https safe to use? This skill has not completed SkillMD's automated safety review yet. Independent scanners report: SkillSpector: PASS, Skill Scanner: PASS. Capability flags: docs only. SkillMD never runs a skill's scripts for you; review the SKILL.md before installing.
Which AI agents work with Https? This skill is tagged as working with Claude Code, Claude.ai, OpenAI Codex. SKILL.md is an open format, so most agents that read a skills directory can load it too.
Is Https free to use? Yes. Installing skills from SkillMD is free. This skill is licensed under MIT.
Who published Https? NeuralBlitz (@neuralblitz) published this skill. Their other Agent Skills are listed on their SkillMD profile.
NeuralBlitz