Re: [httpslocal/usecases] UC-03 with Service Workers (#9)

@Vermat99 What UC-3 indicates is that the web app provided through HTTPS, i.e. in a [secure context](https://w3c.github.io/webappsec-secure-contexts/), is not allowed to access resources through HTTP because [mixed content](https://w3c.github.io/webappsec-mixed-content/) is restricted in the current web security policy.

Even if the web app is hosted by localhost, it is practically regarded as a secure context and eventually its access to other devices in the same local network through HTTP is blocked due to the mixed content restriction. Such a restriction is also applied to fetch operations by service workers, of course.

Although we could avoid such a restriction by issuing a TLS certificate to each device, the certificate cannot be issued because domain validation (DV) of the device is practically impossible. That is our motivation. If you have an interest, we appreciate your participation. Thanks a lot for your comment!

-- 
You are receiving this because you are subscribed to this thread.
Reply to this email directly or view it on GitHub:
https://github.com/httpslocal/usecases/issues/9#issuecomment-335657187