Also some protocols work in dev only when using .localhost. For instance WebAuthn requires TLS with the exception of the .localhost domain so that you don’t need to enable TLS in dev.
tangui
5
wolfiton
I am curious if this attack can’t be stopped using ssl certificates on the following stack:
phoenix (ssl certificate)
absinthe
nextjs(react SSR lib)
1