# Stealing Secrets from Developers Localhost Development using Websockets

**URL:** <https://forum.elixirforum.com/t/stealing-secrets-from-developers-localhost-development-using-websockets/31932>\
**Category:** Discussions\
**Tags:** security, channels, phoenix, live-reload, websockets, liveview, cybersecurity\
**Created:** [May 29, 2020, 8:33pm UTC](https://forum.elixirforum.com/t/stealing-secrets-from-developers-localhost-development-using-websockets/31932 "2020-05-29T20:33:35Z")\
**Posts on this page:** 1\
**Showing post:** 12

<div class="post-metadata">

**Author:** ![tangui](https://forum.elixirforum.com/user_avatar/forum.elixirforum.com/tangui/32/12091_2.png) [@tangui](https://forum.elixirforum.com/u/tangui)\
**Post date:** [May 30, 2020, 6:07pm UTC](https://forum.elixirforum.com/t/stealing-secrets-from-developers-localhost-development-using-websockets/31932/12 "2020-05-30T18:07:42Z")

</div>

> [@hauleth](#):
>
> PSA: Do not use `.local` for your local development domain. It is reserved for mDNS and you should use `.localhost` which is currently reserved but unassigned to anything.

Also some protocols work in dev only when using `.localhost`. For instance WebAuthn requires TLS with the exception of the `.localhost` domain so that you don’t need to enable TLS in dev.

---

_[View the full topic](https://forum.elixirforum.com/t/stealing-secrets-from-developers-localhost-development-using-websockets/31932)._