4 ms·

Lots of stuff like service workers will only work over https

• magicalist 4y ago
  localhost is considered a secure context by browsers so service workers will work from there even without https.
  • eternityforest 4y ago
    I always worry someone is going to take this away, but it seems they haven't yet, and all is well so far.
    • bugmen0t 4y ago
      localhost is in the Secure Context specification. It won’t be taken away.
      • TedDoesntTalk 4y ago
        Specifications can change.
  • d1sxeyes 4y ago
    Although this is true, it's also true that not all 'secure' functionality is enabled for localhost without HTTPS. One such example is secure cookies. There's a longer list here: https://web.dev/when-to-use-local-https/ https://web.dev/when-to-use-local-https/
    • bawolff 4y ago
      The cookie one is the only semi-legit one. And it would be kind of weird that setting the https only flag wouldnt mean what it says. Everything else on that list is you can't test https without https. How could you possibly test mixed content without using https? Http/2 is so tied to TLS that the insecure version that nobody has implemented isn't really the same thing. Etc
      • d1sxeyes 4y ago
        You’re right. But my point was just that although localhost is a secure origin, there are still differences between localhost and sites loaded over HTTPS.
  • gernb 4y ago
    Except I'm trying to debug a mobile webpage so it's not localhost