Comment by lxgr

Only if that site specifically communicates with an (unauthenticated) service bound to a local port though, right?