Wow, thanks everyone for the detailed replies! I didn’t realize how risky `-k` could be in prod. I’ll definitely avoid using it there.
For now, I’ll stick to using it for testing local stuff. I tried it on a dev server with a self-signed cert, and it worked like a charm.
Also, thanks for the tool suggestions—Postman and `mkcert` sound super useful. I’ll check those out!
One last question though: if I’m using `-k` for testing, is there a way to log or see what cert errors it’s ignoring? Just curious!
For now, I’ll stick to using it for testing local stuff. I tried it on a dev server with a self-signed cert, and it worked like a charm.
Also, thanks for the tool suggestions—Postman and `mkcert` sound super useful. I’ll check those out!
One last question though: if I’m using `-k` for testing, is there a way to log or see what cert errors it’s ignoring? Just curious!