prime_number_314159@lemmy.worldtohomelab@lemmy.ml•When is it necessary to have SSL on the LAN side of a reverse proxy (between the reverse proxy and the server)?
2·
11 months agoIt depends on how much other people care about your data, and how much physical control you have over the devices. If you’re in “nation states would like to have it” territory, you should never have unencrypted data at rest, or on the wire. If you’re a regular home user and all your computer stuff is inside your own house, you’re probably fine. In between, there’s a lot of possibilities. Encryption is cheap.
You can just issue new certificates one per year, and otherwise keep your personal root CA encrypted. If someone is into your system to the point they can get the key as you use it, there are bigger things to worry about than them impersonating your own services to you.