1. Welcome to DNTrade. If you want to find out about the latest domain name industry news or talk, share, learn, buy, sell, trade or develop domain names - then you've come to the right place. It's a diverse and active community, with domain investors, web developers and online marketers - and it's free! Click here to join now.
    Dismiss Notice

Chrome update forces all sites using .dev to be htst ssl enabled

Discussion in 'Internet Security' started by Christopher, Dec 11, 2017.

  1. Christopher

    Christopher Membership: Community

    Joined:
    Jun 13, 2014
    Messages:
    478
    Likes Received:
    181
    If you weren't aware Google owns the extension .DEV, which means our much loved extension to use as our local testing environment now is a real address in Google's eyes, and with Chromes latest update forces any .dev site to use HSTS with no option to disable it, bringing it in line with Googles policies about creating a safer web, forcing developers world wide to build for it out of the box. Unless your running your local environments with certs, they will all start breaking. Medium were so annoyed about it they wrote a mega post about it https://medium.engineering/use-a-dev-domain-not-anymore-95219778e6fd