Comment by lousken

why bother with tls, stick it on a separate vlan, lock down all the traffic