Deactivating HTTPS for localhost for Chrome

Published by Tobias Hofmann on

1 min read

I recently got a new company laptop. While this is generally great news, it means to go through a lot of configurations to adopt the standard image to my needs. One thing I noticed was that after installing a local http server, that Chrome won’t connect to http://localhost:8080, but instead goes to https://localhost:8080. Chrome loves security so much, that is switches to TLS even on a localhost connection. Now, this is not exactly how I can work. I cannot – but would love to – install a valid TLS certificate on all my localhost web servers. This is too much work and most of those servers are short living.

How can you disable the automatic switch to TLS done by Chrome?

It seems that this comes from HTST. Therefore, creating an exception is enough to not let Chrome make this TLS switch again.

First, check if HTST is active for localhost

  1. Access chrome://net-internals/#hsts in Chrome

  2. Go to query domain and search for localhost

  3. Check the result. If you get some results, HTST is active for localhost

Deactivate HTST for Localhost

  1. Access chrome://net-internals/#hsts in Chrome
  2. In the delete domain section, insert localhost

  3. Validate the deletion by searching again for localhost. You should new get not found.

Let the world know
Categories: Technology

Tobias Hofmann

Doing stuff with SAP since 1998. Open, web, UX, cloud. I am not a Basis guy, but very knowledgeable about Basis stuff, as it's the foundation of everything I do (DevOps). Performance is king, and unit tests is something I actually do. Developing HTML5 apps when HTML5 wasn't around. HCP/SCP user since 2012, NetWeaver since 2002, ABAP since 1998.


Leave a Reply

Avatar placeholder

Your email address will not be published. Required fields are marked *

This site uses Akismet to reduce spam. Learn how your comment data is processed.