search

basecamp / pow

Zero-configuration Rack server for Mac OS X
http://pow.cx/
MIT License
3.41k stars 258 forks source link

Chrome to force .dev domains to HTTPS via preloaded HSTS #545

Closed adambutler closed 6 years ago

adambutler commented 6 years ago

Details at https://ma.ttias.be/chrome-force-dev-domains-https-via-preloaded-hsts/

CydeWeys commented 6 years ago

There hasn't been a commit in almost three years. Looks like the project is abandoned :(

By the way, the HSTS preload list is used by all major browsers. This isn't specifically a Chrome thing, it's about increasing the security of the TLD.

vosechu commented 6 years ago

I feel like we should also switch to using .test or .localhost instead of .dev. At least .test and .localhost are reserved and won't be sold to someone in the future.

macowie commented 6 years ago

It's already a configurable option, just a matter of updating the defaults (and documentation). In the meantime if you want to update it for yourself:

# ~/.powconfig

export POW_DOMAINS=dev,test

Then, per the code comments, reinstall for the resolver to pick up the updates

$ sudo /path/to/pow --install-system
$ touch ~/.pow/restart.txt
jeremy commented 6 years ago

Switched from .dev to .test #547