SSL support: - protocol until TLSv1.2 - administrator add his own server.key - administrator add his own server.crt - administrator add his own dhparam.pem - HSTS - ciphers list
Why not enable auth digest (htpasswd, htaccess)
I think it's important to securise our tvh web server. So why not use a real SSL support.
Nginx works (some users really using it), but you must configure it properly. For tvh you should use --http_root option to properly map paths, if you map tvh to a www path.