> Switching to unix domain sockets was the recommended path, and that's only because browsers don't support them. Maybe the recommended path should have been t

> Switching to unix domain sockets was the recommended path, and that's only because browsers don't support them. Maybe the recommended path should have been to implement some actual security? > https://lists.gnu.org/archive/html/guile-user/2016-10/msg00007.html https://lists.gnu.org/archive/html/guile-user/2016-10/msg000... > DNS rebinding attack Can't DNS rebind to a "unix socket address" — feels like that by itself would considerably improve security for anything you're working on locally?