3 ms·
> you can't get HTTPS for these domains What are you talking about? Certificate insurance and DNS A/AAAA records are entirely decoupled. Use the ACME dns-01 ch
by oefrha 3y ago
> you can't get HTTPS for these domains
What are you talking about? Certificate insurance and DNS A/AAAA records are entirely decoupled. Use the ACME dns-01 challenge to get a cert for domains resolving to anything, including 127.0.0.1 or ::1. Alternatively you can even use http-01 or other challenges to get a wildcard cert, with subdomains pointing to localhost. I use Lets Encrypt certs for localhost and LAN every day.
Edit: a little more precision.
- jeroenhd 3y agoSure you can get a certificate for those domains, but not the domains you don't own. If I can get a cert for localho.st, someone made a huge mistake. You can set up a localhost redirect on your own domain no problem, and you can even use a local DNS server to make sure nobody can abuse your localhost redirect so your domain doesn't get filtered out by tools like these. However, I assume someone using fbi.com because it happens to redirect to localhost doesn't own a domain (or can't be bothered to set up a redirect of their own).
- xurizaemon 3y agoFor at least one of these tools / domains, local SSL is available. Details here: https://docs.lando.dev/core/v3/security.html https://docs.lando.dev/core/v3/security.html