Hacker News Reader

Most modern browsers should consider http://127.0.0.1/ or http://[::1]/ as trustworthy.

In my experience, it's http://localhost that is considered secure, but not http://127.0.0.1. This may have changed since I last checked.

I believe that Chrome treats all localhost connections as secure now. Not sure about other browsers.

You can access those APIs using SSL from the server, which then relays the results to the client.