Certificates for localhost
If you're desperate, just serve local sdk from <a href="http://localhost/sdk.html" rel="nofollow">http://localhost/sdk.html</a> which will talk to your local app via postMessage proxy. You may even open this proxy with window.open under <a href="https://" rel="nofollow">https://</a> app