Web over HTTPS

The Core Tech Behind Datum's Desktop App

We built an app to expose your localhost to a public HTTPS URL, here's how it's built and what we learned along the way.

Web Platform: What are we working on? · Issue #53 · Igalia/webengineshackfest

Logistics Date & Time: Tuesday 3rd June at 10:00 CEST (local time) URL: https://meet.jit.si/WEH2025-Web-Platform Notes: https://github.com/Igalia/webengineshackfest/wiki/2025-Web-Platform:-What...

[FOSDEM] Browser and Web Platform Devroom at FOSDEM 2026: Call for Participation

Requirements for HTTPS for Local Domains

When connecting to servers on their local network, users are surprised to encounter user interfaces that display errors, show insecure connections, and block some HTTP features when missing a secure context. However, obtaining PKIX certificates for those servers is difficult for a variety of reasons. This document explores requirements for authenticating local servers.

Caddy - The Ultimate Server with Automatic HTTPS

Caddy is a powerful, enterprise-ready, open source web server with automatic HTTPS written in Go

CertSimple | An nginx config for 2017

With HTTP/2 in every browser, load balancing with automatic failover, IPv6, a sorry page, separate blog server, HTML5 SSE and A+ HTTPS.

mitmproxy - an interactive HTTPS proxy

mitmproxy is your swiss-army knife for debugging, testing, privacy measurements, and penetration testing. It can be used to intercept, inspect, modify and replay web traffic such as HTTP/1, HTTP/2, HTTP/3, WebSockets, or any other SSL/TLS-protected protocols. You can prettify and decode a variety of message types ranging from HTML to Protobuf, intercept specific messages on-the-fly, modify them before they reach their destination, and replay them to a client or server later on.

Browser Funding After Search Deals · Issue #55 · Igalia/webengineshackfest

Logistics Date & Time: Tuesday 3rd June at 12:00 CEST (local time) URL: https://meet.jit.si/WEH2025-Funding Notes: https://github.com/Igalia/webengineshackfest/wiki/2025-Browser-Funding-After-S...

Browser Funding After Search Deals · Issue #55 · Igalia/webengineshackfest

Logistics Date & Time: Tuesday 3rd June at 12:00 CEST (local time) URL: https://meet.jit.si/WEH2025-Funding Notes: https://github.com/Igalia/webengineshackfest/wiki/2025-Browser-Funding-After-S...

#protocolsforpublishers #atproto #mcp #webapplets | Chad Kohalyk

Web publishing is facing its next challenge: a new iteration of centralizing platforms. BUT there is also a new wave of open protocols and standards that can help us gain our independence. Next month in NYC we are gathering a group of frontier technologists and popular web publishers to discuss how we can sail into this next platform shift as captains. #ProtocolsForPublishers Learn more and sign up here: https://pfp.unternet.co We will be hosting talks on #atproto #mcp #webapplets and web payments, and give publishers the opportunity to interact directly with developers working on these frontier technologies. Thank you to Unternet, Graze Social, Free our Feeds, and betaworks for their support.

2026 Web Engines Hackfest

Web Platform community event for people working on the different engines (Chromium/Blink/V8, Safari/WebKit/JSC, Firefox/Gecko/SpiderMonkey, Servo, Ladybird), on the testing side (WPT, Test262), on specifications (W3C, WhatWG, TC39), on web compat (webcompat.com), or on documentation (MDN Web Docs, web.dev).

2026 Web Engines Hackfest

Web Platform community event for people working on the different engines (Chromium/Blink/V8, Safari/WebKit/JSC, Firefox/Gecko/SpiderMonkey, Servo, Ladybird), on the testing side (WPT, Test262), on specifications (W3C, WhatWG, TC39), on web compat (webcompat.com), or on documentation (MDN Web Docs, web.dev).

TLS Everywhere, not https: URIs - Design Issues

A few years after HTTP appeared, around when W3C was founded in 1994, it was clear that an unencrypted and unauthenticated connection was too much of a liability for a lot of serious stuff, such as e-commerce, which everyone wanted to do on the web. (In those days, mass Deep Packet Inspection was not technically feasible, so the ubiquitous snooping which we have to day was not the main driver.) There were, among the ideas, two secure versions of HTTP proposed, one known as S-HTTP and the other, as HTTP-S. To cut a long story short, HTTP-S prevailed.

Web Platform: What are we working on?

Web Platform What are we working on? Simone Onofri WebEngineHackFest 2025

Maker Party 2016: Stand Up for a Better Internet | The Mozilla Blog

Mozilla’s annual celebration of making online is challenging outdated copyright law in the EU. Here’s how you can participate. It’s that time of year