Chrome is checking url & cert.
I did the same with a chrome extension and I was forced to use httpS in the iframe and force the site to be trustable (force the unsafe website)
I also oblige to use ‘public dashboard’ to avoid connection…
Also doesn’t this fail if you access it from other systems on your network? localhost points to the current box. If you try to view the page from elsewhere it seems like it would still fail.
Login or sign up disabled while the site is in read only mode