Hacker News new | ask | show | jobs
by gerwim 881 days ago
Another fun fact about .dev which I recently found out while working on a side project:

You NEED to use https when visiting any .dev domain. Google has put it on the HSTS preload list.

It took me a while to find out why my browser kept redirecting me to https when I wanted to use http (local development). Curl worked fine…
2 comments
traceroute66 880 days ago
> Google has put it on the HSTS preload list.

Just for the record, anybody can add their own domain to HSTS via the submission site[1].

[1] https://hstspreload.org/

link
chopin 881 days ago
Pretty much the first I do on any fresh server is to disable http, no matter what it is used for.

IMHO http has no use in the modern world.

link