dev and foo domain extension in Chrome forced redirect to HTTPS notes

_.md

Setup HTTPS with self signed cert. Load the page and recieve ERR_CERT_AUTHORITY_INVALID error. Type badidea anywhere on the Chrome warning page. Seriously!

• https://tech.slashdot.org/story/17/09/18/192227/chrome-to-force-domains-ending-with-dev-and-foo-to-https-via-preloaded-hsts
• https://ma.ttias.be/chrome-force-dev-domains-https-via-preloaded-hsts/
• https://stackoverflow.com/questions/7580508/getting-chrome-to-accept-self-signed-localhost-certificate
• https://serverfault.com/questions/845766/generating-a-self-signed-cert-with-openssl-that-works-in-chrome-58
• webpack/webpack-dev-server#854
• https://stapp.space/hsts-error-in-chrome/
• https://techglimpse.com/chrome-https-website-hsts-failed/

generate-key-cert.sh

openssl req \
    -newkey rsa:2048 \
    -x509 \
    -nodes \
    -keyout server.key \
    -new \
    -out server.crt \
    -subj /CN=canadadry-carbonate.dev \
    -reqexts SAN \
    -extensions SAN \
    -config <(cat /System/Library/OpenSSL/openssl.cnf \
        <(printf '[SAN]\nsubjectAltName=DNS:your-dev-domain-here.dev')) \
    -sha256 \
    -days 3650