Chromium based browsers treat localhost as a secure context, so HTTPS isn't requ... | Hacker News

Hacker Newsnew | past | comments | ask | show | jobs | submit

beala on Aug 18, 2025 | parent | context | favorite | on: Web apps in a single, portable, self-updating, van...

Chromium based browsers treat localhost as a secure context, so HTTPS isn't required to access APIs like the clipboard, web serial, etc.

chuckadams on Aug 18, 2025 | [–]

Not just localhost, but *.localhost too. It's not just Chromium, it's a standard that Firefox supports too (Safari as usual is kind of spotty): https://www.w3.org/TR/secure-contexts/#is-origin-trustworthy

cluckindan on Aug 18, 2025 | [–]

Is that a recent development? It was not so a couple years ago, at least not when a non-80 port is specified.

Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact