

Personal solution:
- Openssl certs (lots of youtube videos on best practice there).
- nginx reverse proxy manager
- adguard home using the dns rewrite pointing to the wildcard domain.
This is enough i find for intranet use. You can get fancy and put it over a wireguard or tailscale network too.





I remeber it happening. There was no backdoor. It was during that time there was a push to put backdoors or weaken public encryption in the name of national security. Truceypt didnt want to play and were threatened with possible legal action. Rather than fight it they decided to stop the project.