it's weird that the warnings aren't disabled by default on chrome for localhost: it's officially classed as a "secure origin"

https://www.chromium.org/Home/chromium-security/prefer-secur...

That's…actually quite smart, I wasn't aware of that.

Thanks -- this has solved an ongoing problem I was having with a couple of clients.