Hi Hicham, at Imply every Druid cluster our software spins up has tls/ssl on by default. The way we set it up it is literally impossible to not have/use TLS/SSL in any of our managed environments. So I can assure you it is totally battle tested. Here are the relevant docs:
https://druid.apache.org/docs/latest/operations/tls-support.html