diff --git a/pkg/op/config.go b/pkg/op/config.go
index 17e9781..9333a5c 100644
--- a/pkg/op/config.go
+++ b/pkg/op/config.go
@@ -31,7 +31,7 @@ func ValidateIssuer(issuer string) error {
 		return errors.New("host for issuer missing")
 	}
 	if u.Scheme != "https" {
-		if devLocalAllowed(u) {
+		if !devLocalAllowed(u) {
 			return errors.New("scheme for issuer must be `https`")
 		}
 	}