undefined | Better HN

0 pointsgerwim2y ago0 comments

Another fun fact about .dev which I recently found out while working on a side project:

You NEED to use https when visiting any .dev domain. Google has put it on the HSTS preload list.

It took me a while to find out why my browser kept redirecting me to https when I wanted to use http (local development). Curl worked fine…

0 comments

> Google has put it on the HSTS preload list.

Just for the record, anybody can add their own domain to HSTS via the submission site[1].

Pretty much the first I do on any fresh server is to disable http, no matter what it is used for.

IMHO http has no use in the modern world.

j / k navigate · click thread line to collapse