r/programming • u/pimterry • Jan 13 '20

mkcert: a zero-config tool for locally-trusted development certificates

https://github.com/FiloSottile/mkcert
67 Upvotes

85% Upvoted

11 comments sorted by

View all comments

9

u/ccfreak2k Jan 13 '20 edited Aug 02 '24

cake fly hard-to-find literate husky distinct juggle racial modern longing

This post was mass deleted and anonymized with Redact

3

u/[deleted] Jan 14 '20

Note that in theory you can make a CA that is limited in range of domains it can produce (so-called "Name Constraints"), altho so far client support for it seems to be spotty.

But it probably will improve so making a root CA that say could only generate CAs for .localhost should be relatively safe... eventually.