News for hackers. Stuff that matters.

A comment on You Can't Follow Me.

Re:You Can't Follow Me by jefftk on Thursday January 11, 2024 @07:10AM (#38951182)
Browsers deal with this by considering localhost a "secure context", and anything that "requires https" actually requires a secure context. [1] You can debug new web features like the Audio Output API that require a secure context [2] with http://localhost urls, and use multiple ports if you need multiple hosts. ActivityPub could do this too.

[1] https://developer.mozilla.org/en-US/docs/Web/Security/Secure...

[2] https://developer.mozilla.org/en-US/docs/Web/Security/Secure...

[ Parent | on HN ]
Re:You Can't Follow Me by pimterry on Thursday January 11, 2024 @08:46AM (#38952086)
> Browsers deal with this by considering localhost a "secure context"

Broadly yes, except Safari which still sometimes doesn't: https://bugs.webkit.org/show_bug.cgi?id=171934

(Not relevant to this case, but eugh it's a very annoying exception)

[ Parent | on HN ]
Re:You Can't Follow Me by jefftk on Thursday January 11, 2024 @09:34AM (#38952673)
Yes, that's not great. But at least it doesn't bite you if you're running an all-localhost dev environment.
[ Parent | on HN ]