Hacker News Reader

I’ve also struggled with this. Is there an elegant solution that you’re aware of? Everything I’ve tried feels really rickety.

I've been using cfssl[1] to generate a root certificate + a localhost certificate and then trusting the root.

For localhost, there’s not much downside to a self-signed cert.

Browsers won't offer to save passwords on self signed sites.

You might be able to get around this using the Chrome "flags" page, search for unsafely-treat-insecure-origin-as-secure.

Chrome flags are pretty annoying to use, especially if you use the same browser for regular browsing.