My system to share private data works like this:
I rent a virtual server at a hosting company.
There I have a self-signed certificate installed.
The folder with the files inside is password protected via
AuthType Basic AuthUserFile /path/.htpasswd Require valid-user
passwords are salted in htpasswd.
It is for downloading files I uploaded.
You enter the url of the file and are prompted to accept the certificate and enter the password and username. If right, you get the file.
Which loopholes do you see I should fix?