Hacker News Reader

You can generate your own root cert and self-sign. No need for third-parties.

I found minica very useful to do something like this (no affiliation): https://github.com/jsha/minica

Do mainline browsers (chrome/firefox/safari) accept this? Do they do it without scaremongering warning the prevent access like with normal TLS and self-signing?

You import your "CA cert" into the browser or the underlying operating system, and then the browser accepts the certs signed by it.

Reply on news.ycombinator.com