News for hackers. Stuff that matters.
Re:Certificates for localhost by icebraining on Wednesday June 20, 2018 @05:53PM (#17360144)
git-annex, which uses a web server on localhost for the Assistant UI, uses this process:

- generate a random token

- start the server configured to only accept requests that contain that token

- generate an HTML file that redirects to a local address passing that token, with read permissions only for the current user

- run the browser with that file as argument

In theory, this should prevent external requests, as well as from other users in the same machine.

Re:Certificates for localhost by sligor on Thursday June 21, 2018 @04:54AM (#17363289)
HTTP over Unix domain socket (owned by the user) would simplify all this.

Sadly, browsers don't support this... :(