Hacker News Reader

Couldn't you just set up a Private CA since you'd have to customize things anyways?

Exactly. You should never consider a network perfectly secure, no matter if it is the internet or your intranet.