Improving HTTPS on private networks

https://alexsci.com/blog/improve-https-1/

4 points · 6 comments · view on lemmy.world

6 Comments

Parsnip8904@beehaw.org · 1 pts · 3y (2 replies)

Will that specified domain be routed internally by default?

tripple@beehaw.org · 1 pts · 3y (1 reply)

Yes, there's two approaches I'm using currently. When you register a subdomain you can choose either localhostcert.net or localcert.net. The former has an A record in the public DNS that points to 127.0.0.1. The latter has no public A records so you need to manage them yourself, possibly with a local DNS resolver like unbound.

SHITPOSTING_ACCOUNT@feddit.de · 3 pts · 3y

Why (for what use cases) would one use the former? Browsers solve this by treating localhost as a secure context (i.e. no mixed content warnings etc.) even if you use plain http.

Azceptit@lemmy.fmhy.ml · 1 pts · 3y

Thumbs up for this guide very informative