Me: Boy, I'd like to test that new browser API. Let me spin up a small project on localhost.
WHATWG: Sorry, https only.
@WomanCorn See https://w3c.github.io/webappsec-secure-contexts/#is-origin-trustworthy step 5.
@domenic hmm.
Maybe I should do more testing. I was under the impression that http on localhost wouldn't get me, say, a service worker.
I'm pretty sure there are APIs that are blocked on file: URLs for security reasons.
@WomanCorn file: URLs are broken for various reasons; bypassing such a large chunk of the platform (i.e. the network stack, the origin model, ...) often has bad interactions. http on localhost should work fine though.
@domenic I am surprised that that works, but it sure does.
a Schelling point for those who seek one