News for hackers. Stuff that matters.

A comment on Show HN: Local development with .local domains and HTTPS. Parent comment

Re:Show HN: Local development with .local domains and HTTPS by plorntus on Tuesday August 01, 2023 @09:07AM (#36955455)
Certain browser features/apis are only available when in a secure context https://www.digicert.com/blog/https-only-features-in-browser... so I imagine this might be a reason you would want it.

That being said I don't know why you would pay for an application that does this but I guess I'm not the target market.

[ Parent | on HN ]
Re:Show HN: Local development with .local domains and HTTPS by ceejayoz on Tuesday August 01, 2023 @09:32AM (#36955734)
Yep. A lot of OAuth integrations will refuse to work on HTTP, too. Some have a `localhost` exception to that restriction, but not all.
[ Parent | on HN ]
Re:Show HN: Local development with .local domains and HTTPS by lostmsu on Tuesday August 01, 2023 @10:37AM (#36956486)
This long article helpfully forgets to mention, that localhost/loopback addresses are considered secure without https.

https://developer.mozilla.org/en-US/docs/Web/Security/Secure...

[ Parent | on HN ]
Re:Show HN: Local development with .local domains and HTTPS by WorldMaker on Tuesday August 01, 2023 @11:46AM (#36957579)
Some features have still moved to TLS-only even for localhost. "Considered secure" is somewhat orthogonal to "requires TLS". You can only use HTTP/2 with TLS, for instance, whether or not you are in a "secure context".
[ Parent | on HN ]