Skip to main content

Help! I accidently enabled HSTS–on localhost

I ran into an issue after accidently enabling HSTS for a website on localhost. This was not an issue for the original website that was running in IIS and had a certificate configured. But when I tried to run an Angular app a little bit later on http://localhost:4200 the browser redirected me immediately to https://localhost.

Whoops! That was not what I wanted in this case.

To fix it, you need to go the network settings of your browser, there are available at:

  • chrome://net-internals/#hsts
  • edge://net-internals/#hsts
  • brave://net-internals/#hsts

Enter ‘localhost’ in the domain textbox under the Delete domain security policies section and hit Delete.


That should do the trick…