Safari: bypass "this connection is not private" doesn't work for access through IP address?

Question

I am using macOS 10.13.1 and Safari 11.0.1, since I upgraded from 10.12 it's not possible to access https websites through IP address.

For example: I want access the config GUI from a router

1. I open Safari go to https://​192.168.0.1.
2. Safari says: "connection is not private"
3. I click "Details" → "Open website" → "Visit website" then I have to enter the password from my local user.
4. The site reloads and again I can see the message: "connection is not private".

If I create a hostname entry in /etc/hosts like: 192.168.0.1 my.funny.router and go to Safari and open https://​my.funny.router the connection can be established after I clicked "Details" → "Open website".

Is there a workaround? Can I disable that "feature"?

Answer 1

The bypass can't be bypassed apparently. Note also that it may fail and keep requesting authentication if your hosts file entry has both short and FQDN specified. In that case you MUST use the FQDN. This is possibly because the Mac will append your local domain to any unqualified host names before checking for permission and (I am guessing) that a remote site identifying as your local machine domain (mymac.local for example) can't be added to the keychain. OR it might be that having ONLY a short host name in /etc/hosts would be OK but if you have BOTH long and short names specified then you must use the FQDN as that is the one that resolves in your host file.

Answer 2

Well the only solution I have found for that issue is to serve the website in safari private mode.
Than safari still complain that the connecton is not private but you can hit "deatils" and than "open website".
With this workaround its not needed to edit /etc/hosts