On: Ask HN: How to do cross platform GUI?

[donatj]

Is there a good way of doing SSL with this that doesn’t require hacking self signed certs into the users browser? A lot of newer web APIs are requiring SSL.

[J-Kuhn → donatj]

Most modern browsers should consider http://127.0.0.1/ or http://[::1]/ as trustworthy.

See https://www.w3.org/TR/secure-contexts/#is-origin-trustworthy

[kodablah → J-Kuhn]

In my experience, it's http://localhost that is considered secure, but not http://127.0.0.1. This may have changed since I last checked.

[modeless → donatj]

I believe that Chrome treats all localhost connections as secure now. Not sure about other browsers.

[yorwba → donatj]

You can access those APIs using SSL from the server, which then relays the results to the client.