Accessing over local network without SSL

When I try to access code-server over a local network I get an error message code-server is being accessed over an insecure domain I understand that the recommended method to expose the server is either SSH or reverse proxy. All these methods are an overkill if the server is always behind the same firewall as the client. There should be a way to acknowledge the message and dismiss it permanently. I did not notice any broken functionality despite the warning.

[code-asher]

My main concern was that people will submit webview/copy/paste/etc issues that are caused by using an insecure domain but that’s been happening anyway so maybe it won’t matter if we make it dismissable.

Maybe we could consider adding something to the issue template that asks if code-server is being accessed over a secure domain or not.

Or, actually, I think the best solution would be to remove the notification and then when someone tries to use a feature that doesn’t work without a secure domain we then pop up a notification explaining why it doesn’t work (like when a user tries to copy or open a web view).

[code-asher]

No plans at the moment but if someone wants to implement this we are definitely happy to merge:

I think the best solution would be to remove the notification and then when someone tries to use a feature that doesn’t work without a secure domain we then pop up a notification explaining why it doesn’t work.

I just tested and here is what I saw was broken (mostly just webviews but there might be other things I missed):

• Paste
• Extension details, markdown preview, images, parts of the getting started walkthrough, welcome pages from extensions like GitLens (all these are webviews)