You can use HTTPS, but you need to be aware that Yealink phones have issues with Let's Encrypt certificates unless you are on one of the most recent firmware versions of the current S series phones (T42S, T48S, etc.).