Again - password and user combo - from the OP on a public & shared wifi is always an issue. Always has been for the last nearly 20 years....
As well - yep - I know I'm right about the self-signed, but thanks for the confirmation - as I run a few mail servers and cloud systems for clients and do secure those datastreams - so, I'm pretty sure about all that
Best to you,
John D.