RIP to using .dev for local development...

[Jake B.]

So, apparently in September Google announced they were going to force HSTS for all .dev domains (a gTLD that they own, and is very commonly used with dnsmasq or edits to hosts files to point to your local loopback for development/testing) through chrome. Didn't see this article until all of my local applications stopped working this morning because I use a self signed certificate for testing ssl, which Chrome blocks when HSTS is being used....

https://ma.ttias.be/chrome-force-dev-domains-https-via-preloaded-hsts/

 

[matthewalan]

I have A LOT of .dev domains for local development on my machine. I figured it was easier to switch to Firefox than it was to switch over all of my development sites.

 

[Jake B.]

I have A LOT of .dev domains for local development on my machine. I figured it was easier to switch to Firefox than it was to switch over all of my development sites.

FireFox (and most other major browsers) uses Google's HSTS preload list, so within a few updates once that list gets updated it'll do the same on FF as well. Spent a solid 30-40 minutes trying to figure out how HSTS would've randomly gotten enabled on my dev environment only to find that article.. lol