Discuss web server compromise using misconfigured SSL certificates and encryption settings and how it can be avoided.