Re:Cached Chrome Top Million Websites
by 2Gkashmiri on Saturday December 31, 2022 @01:18PM
(#34199075)
browsers. padlock icon is crossed out
I just tested this and don't see that. I compared http://neverssl.com to running "python3 -m http.server" and visiting http://localhost:8000
* Chrome: "Not Secure" on neverssl, "i" in a circle on localhost
* Firefox: Padlock with a red line through it on neverssl, page icon on localhost
* Safari: "Not Secure" on neverssl, no message on localhost
They may be using a self-signed cert so it’s https://localhost and the browser is flagging the cert rather than localhost itself.
Localhost, even with HTTP, is a secure context: https://developer.mozilla.org/en-US/docs/Web/Security/Secure...
What tool is screaming at you that localhost is insecure?