The writing is on the wall: in the next few years all modern websites will use HTTPS: search engines are already using HTTPS as a ranking signal. Major browsers only support encrypted HTTP/2, making it de facto mandatory. The question now shifts from whether a site should be supporting HTTPS to how to best support it. In this pragmatic talk, Cassio Goldschmidt will review the technologies that make HTTPS safer: protocols, cipher suites, forward secrecy, OCSP stampling, HTTP Strict Transport Security (HSTS), public key pinning, and the soon to be released first party cookie will be covered in this talk. The talk will also look at free tools to evaluate your HTTPS implementation, troubleshoot as well as initiatives that provide free certificates and free HTTPS services.