3 ms·
About HSTS that is only true sometimes. Google helpfully enabled HSTS on all .dev domains by putting it on the hsts preload list. Now I cannot practically serve
by denkmoon 4y ago
About HSTS that is only true sometimes. Google helpfully enabled HSTS on all .dev domains by putting it on the hsts preload list. Now I cannot practically serve HTTP from a .dev domain even if I wanted to. That's hardly voluntary.
Baffling to me is that one would assume .dev domains are being used for development adjacent purposes. I might, for example, have a piece of in-development software or infrastructure where it is not convenient or even possible without significant effort to get a valid SSL certificate. Now I just can't use that with my .dev domain. Can't use self signed certs on a "development" domain either - who would want to do that though! :)