Self-signed certificates are not secure as they are vulnerable to man-in-the-middle attacks. https://security.stackexchange.com/questions/8110/what-are-the-ris

Self-signed certificates are not secure as they are vulnerable to man-in-the-middle attacks. https://security.stackexchange.com/questions/8110/what-are-the-risks-of-self-signing-a-certificate-for-ssl https://security.stackexchange.com/questions/8110/what-are-t... With free/cheap certificates widely available through e.g. Let's Encrypt and AWS Certificate Manager, there's absolutely no reason to use self-signed certificates. The cPanel login page linked to in the footer isn't using any HTTPS, self-signed or otherwise. This means that anyone controlling the network can inject javascript to steal your users' passwords.