There's no server required measures. There's even a flag that lets you treat a specific IP as a secure context for domainless stuff(Hopefully nobody ruins that)

There's no server required measures. There's even a flag that lets you treat a specific IP as a secure context for domainless stuff(Hopefully nobody ruins that). The problem is actual missing features that would need to be added. Mozilla tried with FlyWeb but abandoned the project.