4
Improving HTTPS on private networks
(alexsci.com)
A community for technical news and discussion of cybersecurity and closely related topics.
Will that specified domain be routed internally by default?
Yes, there's two approaches I'm using currently. When you register a subdomain you can choose either
localhostcert.net
orlocalcert.net
. The former has an A record in the public DNS that points to 127.0.0.1. The latter has no public A records so you need to manage them yourself, possibly with a local DNS resolver like unbound.Why (for what use cases) would one use the former? Browsers solve this by treating localhost as a secure context (i.e. no mixed content warnings etc.) even if you use plain http.