Valet: Chrome to force https on .dev

[lesaff]

This might change the way Valet sets https/secure settings?

Per this article
https://ma.ttias.be/chrome-force-dev-domains-https-via-preloaded-hsts/

and this commit
https://chromium-review.googlesource.com/c/chromium/src/+/669923

[adamwathan]

Yep we'll change the default TLD I guess as annoying as that is.

[joshmanders]

Wouldn't it be better to do secure by default on domains?

[adamwathan]

Nah I think better to use a TLD reserved for local development so we're just not at the mercy of this stuff. I personally don't secure any of my local stuff, and it's impossible to do it by default because of the dynamic nature of how parked project folders work.

[joshmanders]

Ah yeah, I keep forgetting about parked folders.

[rap2hpoutre]

People are talking about .localhost, what do you think about it?

[clarkeash]

.test is also an option https://en.wikipedia.org/wiki/.test

[freddyheppell]

436 is addressing this

[andyunleashed]

@clarkeash I agree with .test - as it's a reserved name, so in theory should never been over-ridden.

[clarkeash]

@andyunleashed I think they are going to go with .localhost (which is also reserved) but will be easy to change on your machine to whatever you want.

[andyunleashed]

@clarkeash Are you able to set the TLD when using valet park?

[drbyte]

Changing the TLD to .test can be done today by typing:

valet domain test

[joshmanders]

valet domain bananasandwich

[andyunleashed]

Great, thanks both. Also @joshmanders - .bananasandwich is most definitely going to be my development TLD moving forward.

[drbyte]

For quick reference, here's a perpetual list of "claimed" TLDs: https://data.iana.org/TLD/tlds-alpha-by-domain.txt ... ie: the ones to not use.

[svenluijten]

In addition to @drbyte's comment, here is the RFC that specifies and encourages the use of .test, .example, .invalid, and .localhost. (and here is an easier to read blogpost)

Personally I'd use .localhost, as it'd be immediately recognizable as being hosted on the local machine instead of on a seperate server with some DNS trickery.

[rjchauhan]

.devv is also working!

[joshmanders]

All I read is .dew and now all my apps are named mountain.dew

[zrkb]

.vanilla is an option too.

[maschultz]

valet domain dev

then check chrome for an inevitable error, which is now apparently now normal due to SSL shitz (09.29.18), then try:

valet secure

Chrome 69.0.3497.100 (Official Build) (64-bit) then works for me in macOS Mojave.

-- MS//

[joshmanders]

Yes you can still use .dev by securing your site, but now that they released https://v8.dev they've basically went back on their "We're only using .dev internally" and they'll most likely put something else on that TLD too, so you're gonna have problems soon. Best to switch to .test