[gregfagan]

Unless you’re building a web app that requires a secure context.

https://developer.mozilla.org/en-US/docs/Web/Security/Secure...

[globular-toast]

Browsers support *.localhost as a secure context.

[Already__Taken]

yeh secure by default isn't harder than dealing with every edge case and quirk.