hammer-editor/docs
Adam Brown 5b17fbf429
Make clients HTTPS-only; add dev self-signed cert support (#743)
Remove the HTTP/HTTPS protocol picker and all ssl plumbing from the
client. Persisted server settings now always resolve to HTTPS, so a
legacy ssl=false server.json is upgraded on load. ServerSettings.ssl is
kept only as an internal seam for the plain-HTTP integration-test server.

Android: drop the permissive network_security_config so cleartext
traffic uses the secure platform default (blocked).

Server keeps its plain HTTP connector for reverse-proxy deployments. In
--dev with no sslCert configured, it now generates and persists a
self-signed keystore (hammer_data/dev-selfsigned.jks) and serves TLS on
a non-privileged port (8443 by default). The desktop --dev client trusts
that cert for loopback hosts only; remote hosts still get full cert and
hostname validation.
2026-07-17 00:52:41 -07:00
..
ARCHITECTURE.md Cleanup some docs files 2026-06-20 00:12:28 -07:00
ASSET-GENERATION.md Add manifest-driven asset generation pipeline 2026-05-22 19:26:49 -07:00
DESIGN-PATTERNS.md Rename file to match pattern 2026-06-23 00:09:49 -07:00
HOW-TO-RELEASE.md Add "Server only" publish scope to prepareForRelease 2026-06-23 00:38:08 -07:00
HOW-TO-RUN-A-SERVER.md Make clients HTTPS-only; add dev self-signed cert support (#743) 2026-07-17 00:52:41 -07:00
ROADMAP.md Update ROADMAP.md to reflect completed tasks 2026-06-16 01:22:00 -07:00
SERVER-SECRET-STORAGE.md Update SERVER-SECRET-STORAGE.md for clarity on upgrades 2026-06-23 16:44:06 -07:00
STORY-IDEAS.md Story Ideas: account-level idea capture with sync (#720) 2026-07-05 01:49:04 -07:00
SYNCING-PROTOCOL.md Story Ideas: account-level idea capture with sync (#720) 2026-07-05 01:49:04 -07:00
WEB-DESIGN-SYSTEM.md CSS Refactor 2025-12-24 01:20:22 -08:00