434
submitted 1 year ago by grue@lemmy.world to c/selfhosted@lemmy.world
you are viewing a single comment's thread
view the rest of the comments
[-] ShittyBeatlesFCPres@lemmy.world 26 points 1 year ago

I’m pretty sure browsers don’t even load http sites anymore.

[-] AbidanYre@lemmy.world 47 points 1 year ago

When I spin up a new self hosted service it's easier to add caddy to the stack than to convince Firefox to load http.

[-] dparticiple@sh.itjust.works 15 points 1 year ago

Tailscale is also ridiculously easy to use for this purpose. The serve and Funnel features make secure self hosting really easy from your tailnet (one can easily provision certificates for nodes using Let's Encrypt from the CLI: https://tailscale.com/blog/reintroducing-serve-funnel

[-] cmnybo@discuss.tchncs.de 15 points 1 year ago

HTTP works fine in Firefox unless you set it to HTTPS only. Even then, you only have to click off a warning to open an HTTP site.

[-] hakunawazo@lemmy.world 2 points 1 year ago* (last edited 1 year ago)

But if you try to load a local resource as localhost in Firefox...

For the sake of completeness:

Firefox contains a security patch which restricts the kinds of files that pages can load (and methods of loading) when you open them from a file:// URL. This change was made to prevent exfiltration of valuable data within reach of a local page, as demonstrated in an available exploit.

More info: https://developer.mozilla.org/docs/Web/HTTP/CORS/Errors/CORSRequestNotHttp

Insecure, but fast fix, if you don't want to install a local webserver:

about:config
security.fileuri.strict_origin_policy
change to false

They load. I have to specify http:// to get it to work though.

[-] gray@pawb.social 1 points 1 year ago

I’m sure google will fix that in chrome, like killing adblocker functionality.

this post was submitted on 07 Apr 2025
434 points (98.9% liked)

Selfhosted

61853 readers
400 users here now

A place to share alternatives to popular online services that can be self-hosted without giving up privacy or locking you into a service you don't control.

Rules:

Detailed Rules Post

  1. Be civil.

  2. No spam.

  3. Posts are to be related to self-hosting.

  4. Don't duplicate the full text of your blog or readme if you're providing a link.

  5. Submission headline should match the article title.

  6. No trolling.

  7. Promotion posts require active participation, with an account that is at least 30 days old. F/LOSS without a paywall has exceptions, with requirements. See the rules link for details. Tags [CBH] or [AIP] are required, see the links in Rule 8 for details.

  8. AI-related discussions and AI-involved promotional posts have additional requirements for tagging, as noted in Rule 7 and the AI & Promotional Post Expanded Rules post, and find example disclosures here.

Resources:

Any issues on the community? Report it using the report flag.

Questions? DM the mods!

founded 3 years ago
MODERATORS