Oh, of course option 1 is the most palatable, until everyone gets their shit together regarding standards.<p>No, I know I&#x27;m going down the &quot;Here ye be dragons&quot; path of making my own IoT infrastructure. It&#x27;s been one hell of a wild ride, seeing this and that offering, and how they fall flat on &#x27;If internet is down, you have a doorstop&#x27;. I show people at the hackerspace and other tech groups, and they really see value in it.<p>I&#x27;ll certainly have to look into the HidServAuth option. However, I&#x27;ve been watching to see if Ca.Cert is going to get off their collective asses and revoke the &quot;Only EV2 certs can be provided for .onion addresses&quot; rule. My biggest problem with certs on .onion is that they fail to work. Ideally, I want a LetsEncrypt cert on all of my services (Node-Red, Mosquitto via MQTTSSL, email). And just be done with it.<p>I&#x27;m certainly trying an orthogonal way of setting up IoT vs the Corporate way of remote data centers and oppressive data handling techniques.<p>:)