Once you have control of the destination, you could get a valid SSL certificate with Letsencrypt or whatever.