Imagine wanting to let web pages to hit a loopback (localhost) address and having to roll client certs all because a single browser vendor decides they want to get cute over some absurdist nonsense
***extreme sarcasm*** you'll never guess which one it is: bugs.webkit.org/show_bug.cgi?i
