Sometimes people want to get a certificate for the hostname “localhost”, either for use in local development, or for distribution with a native application that needs to communicate with a web application. Let’s Encrypt can’t provide certificates for “localhost” because nobody uniquely owns it, and it’s not rooted in a top level domain like “.com” or “.net”. It’s possible to set up your own domain name that happens to resolve to 127.0.0.1, and get a certificate for it using the DNS challenge. However, this is generally a bad idea and there are better options.
Requirements for HTTPS for Local Domains
When connecting to servers on their local network, users are surprised to encounter user interfaces that display errors, show insecure connections, and block some HTTP features when missing a secure context. However, obtaining PKIX certificates for those servers is difficult for a variety of reasons. This document explores requirements for authenticating local servers.
Install a root CA certificate in the trust store
Enterprise environments sometimes have a local Certificate Authority (CA) that issues certificates for use within the organization. For an Ubuntu server to be functional, and to trust the hosts in ...
HTTPS for Local Networks · Issue #78 · w3c/tpac2024-breakouts
Session description It is not possible to get a publicly trusted CA to sign a certificate for a local domain (i.e. a non-publicly resolvable domain name such as router.local, printer.home, 192.168....
160504 – Localhost subdomains don't work
160504 – Localhost subdomains don't work
LOCALHOST Vancouver
LOCALHOST Vancouver is a week of tech, media, & other explorations of how to create things we can own together. July 20th - 28th, 2024.
06 · E2EE in the Local-First Setting
Examining design considerations for developing cryptography for the local-first setting.
Special-Use Domain Names
This document describes what it means to say that a Domain Name (DNS name) is reserved for special use, when reserving such a name is appropriate, and the procedure for doing so. It establishes an IANA registry for such domain names, and seeds it with entries for some of the already established special domain names.
Setting up a free *.city.state.us locality domain
In the US, you can get a domain name like `somename.city.state.us` for free. If your town has its own domain, you can get nameservers from Amazon Lightsail, send the *Interim .US Domain Template* to the delegated manager for your locality, then point DNS entries at your webhost.
Postfix client certificate verification – Dan Langille's Other Diary
I decided to set up some of my mail servers to require certification authentication on the submission port (587). In my case, I want to forward mail from my server at home to my public servers out there on the Internet. I don’t want just anyone to be able to submit mail here, so the easiest way for me do to this was with certification.
647959 - Add Honest Achmed's root certificate
RESOLVED (kathleen.a.wilson) in CA Program - CA Certificate Root Program. Last updated 2026-04-24.
primus852/traefik-ddns
This repository provides configuration files and instructions for setting up a Cloudflare Dynamic DNS (DDNS) service and a Traefik reverse proxy with Let's Encrypt SSL/TLS support. It includes Docker Compose configurations, environment variable templates, and detailed usage instructions to automate DNS updates and manage SSL certificates.
The Core Tech Behind Datum's Desktop App
We built an app to expose your localhost to a public HTTPS URL, here's how it's built and what we learned along the way.
LOCALHOST DWeb Vancouver Webring
Lieu-powered DWebYVR webring. Contribute to DWebYVR/localhost_vancouver_webring development by creating an account on GitHub.
was it loaded via http+dns+ssl? then it's server-first. (which is not bad. but it's not the local-first i want.)
Jake Lazaroff
this looks very cool, i mean that genuinely, but tbh i bristle a bit seeing "local-first" used as a straw man here. of course if your server is the source of truth you can eliminate a lot of local-first complexity — the entire point of that complexity is to avoid a server-authoritative architecture!
