Well sure, it’s localhost. Transport security is ridiculous overkill in that case. The benefit of doing it is eliminating one more variable between dev and othe

Well sure, it’s localhost. Transport security is ridiculous overkill in that case. The benefit of doing it is eliminating one more variable between dev and other environments. One may certainly decide that benefit is not worth jumping through too many hoops, but in any case the point of doing it is not the actual TLS. At this point browsers have all sorts of behavioral differences between secure and insecure, so you’re kinda just choosing which poison to drink: “wow this setup is a pain” vs “why does this work locally but not in staging”