llambiel··on Let's Encrypt and Nginx – State of the art secure web deploymentI agree with your concern. As a temporary "workaround" I've updated the article with a SHA256 checksum of the key. I'll chase the Nginx team for serving this key over https