[BrowncoatShadow]

https://github.com/FiloSottile/mkcert

Still self-signed, but generates a CA that gets added to your browser. It is all pretty seamless.

[steve19]

Is there any downside to using this to secure local servers with non TLD domains such as server.local?