learning-unlimited/ESP-Website — comment on commit 5ed0b71832c68b617eb7c19c870249f2ce7a4370
File:  line 0
By dehnert:

> Running any program on an open port (at MIT anyway) means anyone on the Internet can try to connect to that service.

Does Varnish not have an easy way to make it bind to 127.0.0.1 instead of 0.0.0.0? Certainly that's what Django's standard dev server does, which should eliminate this as a security issue. (Not that it eliminates the other reasons for just skipping the Varnish tests, and it'd require some configuration, but at least the security thing shouldn't be that big of a deal...)