Thanks! Encrypting traffic is generally a good thing, so enabling HTTPS is always recommended. Yes, you could argue that internal traffic doesn't need to be encrypted, because you trust your internal network.
Is HTTPS necessary on local network?
HTTPS on localhost (127. x.x.x) is a waste of resources, since you're encrypting network traffic that doesn't pass over an actual network. HTTPS on the local network is quite valuable in the real world, since the reality is that you can't trust your local network much more than you can trust the internet.
How do I get HTTPS on intranet?
You have these options:
- Purchase a trusted certificate.
- Or, generate your own root certificate, install it in browsers on all intranet computers (you should be able to do it since it's intranet), generate your own server certificate signed with your own root certificate. This is actually what companies often do.
