ip2k/I-Dont-Care-About-HSTS-For-Localhost
View on GitHub ↗ ★ 140
Helps ease the pain of newer Chrome versions forcing HTTP Strict Transport Security for localhost, then caching via dynamic domain security policies if it ever works once, forcing HTTPS on local dev servers until "localhost" is manually reset via chrome://net-internals/#hsts every single time this happens. This installable policy for macOS fixes that via adding localhost to HSTSPolicyBypassList and CertificateTransparencyEnforcementDisabledForURLs.
4 mentions on Hacker News by 1 person: 1 story, 3 comments · first 2022-06-03 · latest 2023-11-14
20082026
-
…makes those exceedingly difficult to use, thus the need for extremely convoluted workarounds like https://github.com/ip2k/I-Dont-Care-About-HSTS-For-Localhost (it’s my repo).
comment by seanp2k2 · 2023-11-14 · in The laptop that won't die -
Even more ridiculous IMO is the requirement for a REAL AND VALID SSL CERT for localhost. I made https://github.com/ip2k/I-Dont-Care-About-HSTS-For-Localhost to share some of the frankly ridiculous techniques required to work around this in…
comment by seanp2k2 · 2023-04-09 · in Show HN: BrowserBox – do stuff with browsers that you can't normally -
…more ridiculous is the HSTS requirement for localhost, which inspired me to share the techniques in https://github.com/ip2k/I-Dont-Care-About-HSTS-For-Localhost for automating a bit of the frankly ridiculous and idiotic process required to…
comment by seanp2k2 · 2023-04-09 · in Show HN: BrowserBox – do stuff with browsers that you can't normally -
▲ 107
I don't care about HSTS for localhoststory by seanp2k2 · 2022-06-03 · 95 comments