Re:Chrome 68 will mark all HTTP sites as “not secure”
by aurelian15 on Friday February 09, 2018 @02:31PM
(#16343151)
Yes, there already is an exception for localhost. HTTP on localhost is considered a "secure context".
Edit: To be more precise, and to quote [1]
"Secure Contexts says UAs MAY treat localhost as a secure context only if they can guarantee it will only ever resolve to a loopback address (and are in any case not required to). https://w3c.github.io/webappsec-secure-contexts/#localhost"
Edit: To be more precise, and to quote [1]
"Secure Contexts says UAs MAY treat localhost as a secure context only if they can guarantee it will only ever resolve to a loopback address (and are in any case not required to). https://w3c.github.io/webappsec-secure-contexts/#localhost"
[1] https://github.com/w3ctag/design-principles/pull/75#issuecom...