Hacker News Reader

HSTS is required for .dev

Install a root cert? Takes 1 minute.

Yeah sure takes one minute, one minute of wondering if you really wanna bash your head against a wall getting openssl to spit out an X509 cert and then some.

Or use any of the million utilities for setting up a machine-local CA.

mkcert is one.

You mean wait six to eight months for the IT security department in another division of the company in another state to -maybe- approve my cert request.

Not all web development is three guys on Linux laptops at WeWork.

Why would you need a real cert? This is for your local machine, right? Use the tool, generate a CA, important into Mozilla's trust store, and go nuts.

I'm trying to imagine a webdev workflow where you couldn't get a machine-local CA working.

No admin privileges to manipulate the certificate store is one.

You shouldn't need admin to add a CA to the Windows User Trusted Root Store.

https://docs.microsoft.com/en-us/windows/desktop/seccrypto/s...

I do development. I do not use Windows.

If you're a big org, presumably you could just get your org to just buy the TLD if it's that much trouble.

Something tells me it's not actually that much trouble though, and people just like whining about minor inconveniences because it's the internet and they can.

Reply on news.ycombinator.com