← All repos

ip2k/I-Dont-Care-About-HSTS-For-Localhost

View on GitHub ↗ ★ 140

Helps ease the pain of newer Chrome versions forcing HTTP Strict Transport Security for localhost, then caching via dynamic domain security policies if it ever works once, forcing HTTPS on local dev servers until "localhost" is manually reset via chrome://net-internals/#hsts every single time this happens. This installable policy for macOS fixes that via adding localhost to HSTSPolicyBypassList and CertificateTransparencyEnforcementDisabledForURLs.

4 mentions on Hacker News by 1 person: 1 story, 3 comments · first 2022-06-03 · latest 2023-11-14