3 ms·
> why localhost should scream "insecure" Localhost, even with HTTP, is a secure context: https://developer.mozilla.org/en-US/docs/Web/Security/Secure_Contexts
by jefftk 4y ago
> why localhost should scream "insecure"
Localhost, even with HTTP, is a secure context: https://developer.mozilla.org/en-US/docs/Web/Security/Secure_Contexts https://developer.mozilla.org/en-US/docs/Web/Security/Secure...
What tool is screaming at you that localhost is insecure?
- 2Gkashmiri 4y agobrowsers. padlock icon is crossed out
- jefftk 4y agoI just tested this and don't see that. I compared http://neverssl.com http://neverssl.com to running "python3 -m http.server" and visiting http://localhost:8000 http://localhost:8000 * Chrome: "Not Secure" on neverssl, "i" in a circle on localhost * Firefox: Padlock with a red line through it on neverssl, page icon on localhost * Safari: "Not Secure" on neverssl, no message on localhost
- scrose 4y agoThey may be using a self-signed cert so it’s https://localhost https://localhost and the browser is flagging the cert rather than localhost itself.