All of what worthless? The advice that cakoose gives seems quite valid to me without any encryption to localhost. What do you mean encrypt calls to localhost?

All of what worthless? The advice that cakoose gives seems quite valid to me without any encryption to localhost. What do you mean encrypt calls to localhost? Encrypt with https? That sounds hard since you can't get a real CA to issue you such a cert. I don't see much point in encrypting with https because people off your machine can't sniff or intercept your connection to localhost. Is your goal to protect yourself from other programs or users on your same machine? That might be a valid concern on a machine with multiple users, but definitely makes the problem harder. Or do you want some custom application-level encryption? I can't think of a good way to implement that either, but maybe it's possible. But since I don't know what attacks you're trying to protect against, I can't tell whether there's any benefit at all to encryption.