3 ms·
HSTS is required for .dev
by bepvte 8y ago
HSTS is required for .dev
- fastball 8y agoInstall a root cert? Takes 1 minute.
- sascha_sl 8y agoYeah sure takes one minute, one minute of wondering if you really wanna bash your head against a wall getting openssl to spit out an X509 cert and then some.
- AckSyn 8y agoOpenSSL isn't that difficult to work with.
- Spivak 8y agoOr use any of the million utilities for setting up a machine-local CA. mkcert is one.
- reaperducer 8y agoYou mean wait six to eight months for the IT security department in another division of the company in another state to -maybe- approve my cert request. Not all web development is three guys on Linux laptops at WeWork.
- Spivak 8y agoWhy would you need a real cert? This is for your local machine, right? Use the tool, generate a CA, important into Mozilla's trust store, and go nuts. I'm trying to imagine a webdev workflow where you couldn't get a machine-local CA working.
- Aeolun 8y agoNo admin privileges to manipulate the certificate store is one.
- Spivak 8y agoYou shouldn't need admin to add a CA to the Windows User Trusted Root Store. https://docs.microsoft.com/en-us/windows/desktop/seccrypto/system-store-locations https://docs.microsoft.com/en-us/windows/desktop/seccrypto/s...
- reaperducer 8y agoI do development. I do not use Windows.
- fastball 8y agoIf you're a big org, presumably you could just get your org to just buy the TLD if it's that much trouble. Something tells me it's not actually that much trouble though, and people just like whining about minor inconveniences because it's the internet and they can.