search

Cycling74 / miraweb

MIT License
139 stars 14 forks source link

HTTPS warning #7

Open fde31 opened 7 years ago

fde31 commented 7 years ago

When using motion data Chrome prints a warning that support for the 'deviceorientation' event on insecure origins is deprecated and will be removed in the future. Down the road MiraWeb should be delivered and used on a HTTPS level.

catarak commented 7 years ago

Third-party SSL certificates can't be issued for localhost, for security reasons (reference 1) (reference 2). We could create some self-signed certificates, but then every time a user navigated to https://localhost:8086 they would see untrusted-localhost

The ways around this are

  1. Change /etc/hosts to map a TLD to localhost, then issue a certificate for that TLD. All users would have to manually edit their /etc/hosts, so this is not really realistic.
  2. Make a self signed certificate, then follow step 2 of this blog post. I think this is also not realistic because we'd have to get all users to manually trust the certificate.

So, I'm not really sure what we can do... thoughts?