Local network HTTPS with IP address

Question

I have a small REST server running on a local network, with a bunch of client applications connected (via IP address).

I want to secure this traffic so that access tokens cannot be sniffed.

According to This answer I can create a self signed cert. using an IP (although not common). If i go down this route (assuming no physical access to the server box itself) is this secure?

Answer 1

Yes. It is as secure as CA-signed certificate as long as users always install the correct certificate. (Make sure the the certificate is distributed securely.)

If distributing it securely seems too much trouble, then you may see answers here and consider using certificate issued by letsencrypt.org if you can.