They don&#x27;t really need valid TLS in the first place for localhost.<p>At least in firefox Mixed content warnings can be bypassed with custom protocols that declare that they&#x27;re secure for embedding in secure content.