[tsimionescu]

What does it mean to trust an IP address? If you found that a link took you to gmail.com on 127.0.0.1:8716, would you be fine with providing your gmail credentials to that site?

[galaxyLogic]

I would think I can trust anything on 127.0.0.1 because that can only be my local machine, right?

If there is something running on 127.0.0.1:8716 which I have not given permission to run then my machine is compromised already. No?

[gruez]

https://1.1.1.1/ is a thing. certificate used: https://crt.sh/?id=1044327786

[silon42]

If the site provides a trusted certificate for gmail.com, things are fine. IP shouldn't matter, port probably will.