News for hackers. Stuff that matters.
Re:Cached Chrome Top Million Websites by jefftk on Saturday December 31, 2022 @12:17PM (#34198448)
> why localhost should scream "insecure"

Localhost, even with HTTP, is a secure context: https://developer.mozilla.org/en-US/docs/Web/Security/Secure...

What tool is screaming at you that localhost is insecure?

Re:Cached Chrome Top Million Websites by 2Gkashmiri on Saturday December 31, 2022 @01:18PM (#34199075)
browsers. padlock icon is crossed out
Re:Cached Chrome Top Million Websites by jefftk on Saturday December 31, 2022 @01:54PM (#34199478)
I just tested this and don't see that. I compared http://neverssl.com to running "python3 -m http.server" and visiting http://localhost:8000

* Chrome: "Not Secure" on neverssl, "i" in a circle on localhost

* Firefox: Padlock with a red line through it on neverssl, page icon on localhost

* Safari: "Not Secure" on neverssl, no message on localhost

Re:Cached Chrome Top Million Websites by scrose on Saturday December 31, 2022 @01:19PM (#34199084)
They may be using a self-signed cert so it’s https://localhost and the browser is flagging the cert rather than localhost itself.