- Recommend CA certificates as the first option, as they're trusted
by other applications and require less configuration. Let's Encrypt
has made CA certificates available for free for a while now.
- Link to mkcert as an alternative for self-signed certificates
(for local development purposes).
(cherry picked from commit 8acfc9fa52)