Well, .dev is a valid TLD for a while, so you had plenty of time to move away from using it. But if you do, all you need is serving your dev site using HTTPS. It's pretty easy with either a self-signed cert (you still have to convince the browser to accept it as valid), or via Let's Encrypt (but in that case you have to buy the domain).