diff --git a/conf/config.js b/conf/config.js
index 125f152..73e8607 100644
--- a/conf/config.js
+++ b/conf/config.js
@@ -54,7 +54,7 @@ module.exports = {
  *  and it may have unintended consequences in practice.
  *
  */
-    httpUnsafeOrigin: 'http://127.0.0.1:__PORT__',
+    httpUnsafeOrigin: 'https://127.0.0.1:__PORT__',
 
 /*  httpSafeOrigin is the URL that is used for the 'sandbox' described above.
  *  If you're testing or developing with CryptPad on your local machine then
@@ -126,7 +126,7 @@ module.exports = {
      *  (/contact.html) if you provide it below.
      */
     adminEmail: '__EMAIL__',
-    
+
     /* =====================
      *        STORAGE
      * ===================== */