Hmm, I stand corrected. Just upgraded to the latest macOS High Sierra, and it appears that Safari is automatically redirecting http to https for .dev. I changed a local dev domain in my hosts file to .dew and it started working via http again.