On Sunday, 11 June 2017 03:57:38 UTC+2, bradfitz wrote: > > Perhaps the autocert package should special case localhost and just serve > a self-signed cert in that case. That'd be useful for testing and > consistency. > > I filed https://github.com/golang/go/issues/20640 to think about that. > > Maybe I should comment there, but, simply put, the OP accidentally triggered a problem for himself by unwittingly using localhost, we don't want to make this hard to figure out if it happens to anyone else. Documentation would address part of this concern, but not adequately. Other than a very clear warning at run time, I can't think how one would alert a developer that he's using autocert in a test-only mode.
Then again, despite three cups of coffee, I still can't quite explain my reservations properly, either, so maybe someone else can pick up that ball. Lucio. -- You received this message because you are subscribed to the Google Groups "golang-nuts" group. To unsubscribe from this group and stop receiving emails from it, send an email to golang-nuts+unsubscr...@googlegroups.com. For more options, visit https://groups.google.com/d/optout.
