Correctly securing

[RyGy7]

So I have zoneminder installed and loving it on home network. I made available through my router via port forwarding (1.2.3.4:8080) and adding a login page. So I can access externally but I'm passing my user id and pw in plain text no? I would like to order a certificate for my domain but that is name based and DNS does not permit adding a port correct?

So I'm curious how everyone else gets around this when your ISP blocks port 80 "for network safety' reasons I was redirecting domain name through an AWS server but that doesn't solve the issue that going back to my home IP is not encrypted right?

thoughts?

[Nerre]

You can almost always use a self-signed SSL certificate, the only problem is that the first time you access your server you will have to tell your browser that you trust the certificate.

A web server certificate serves two purposes:
1. Allowing an encrypted conenction
2. Identifying the server

You only need a CA signed certificate for number 2.