What the benefit of using https over http?

Setting a personal server, what real benefit does https giver over http?

https does encrypt all the communication between the client and the server (transferred data, also passwords). In a local network with encrypted wireless connections this is perhaps acceptable (if there are no important data). One problem I could think about is if you run a client outside your local network that it exposes passwords and/or other data.

All public setups must use https encryption (or it is very strongly recommended).

1 Like

is it fine to use a self signed (untrusted) certificate?

Sure, it only means that you have to verify the certificates yourself for each client but then it provides the same security. If you have your own domain name, you can use free certificates from letsencrypt.com.

1 Like