post: localhost considered harmful