5 ms·
> So I cannot access the box anymore at all? My understanding is that you can access it directly. But you can't embed e.g. images or JavaScript from that serve
by TimWolla 6y ago
> So I cannot access the box anymore at all?
My understanding is that you can access it directly. But you can't embed e.g. images or JavaScript from that server within a website running on a public IP address. I consider that a good thing.
- zeroimpl 6y agoYou cannot make an AJAX call from an HTTPS site to a HTTP site on a local IP address. One of the internal web applications I develop (which is hosted over HTTPS itself) has to workaround this by doing the connection from the browser to the local IP address over HTTPS, but upon detecting HTTPS cert errors it opens a popup and walks the user through the process of adding an exception to connect anyways. Once that popup closes, then the AJAX request gets retried and succeeds. While this works for an internal application, it would be unacceptable for any consumer product.
- xg15 6y agoYou cannot make an AJAX call from an HTTPS site to a HTTP site on a local IP address. This was sort of my point - because with the new rules in place, I cannot make an AJAX call from a HTTP site to an internal address either.
- zeroimpl 6y agoAgreed - this HTTPS everywhere madness needs to stop as there are still valid use-cases for HTTP and no user-friendly workaround for enabling access to local IP addresses via HTTPS.