It&#x27;s easy to get a good configuration for popular servers from <a href="https:&#x2F;&#x2F;mozilla.github.io&#x2F;server-side-tls&#x2F;ssl-config-generator&#x2F;" rel="nofollow">https:&#x2F;&#x2F;mozilla.github.io&#x2F;server-side-tls&#x2F;ssl-config-generat...</a> and certificates are really easy to get from Let&#x27;s Encrypt, both with the official client or others such as acme-tiny or simp_le if you don&#x27;t like the official one. Headaches are not an excuse any more.