alt Hacker NewsFrom personal experience .dev is a little weird. For one thing its on the HSTS preload list, enforcing https. You cannot make a http://... request to a .dev domain from most browsers. I found this out the hard way after trying to use .dev for... development.
Replies
xhkkffbf • today at 3:11 PM
That's a deal breaker for me. Who has the time to set up full crypto protocols when just noodling around?
I understand using http on localhost and in some cases local domains accessible within the LAN. But I don't see much point in using http for public domains, especially since browsers apply many restrictions to insecure origins (http://*.localhost is considered secure).