Whether requests to baseUrl would travel unencrypted, as one sentence for a warning
(without a warning: prefix), or undefined when they would not: for https:, for a
URL that does not parse, and for a loopback host (localhost, 127.0.0.0/8, ::1),
where nothing leaves the machine.
The sentence names the host (url.host: host and port, never the userinfo) and what
secret travels with the requests: the base URL's credentials when it carries userinfo,
and every phrase in secrets (noun phrases such as "the API key"). It never contains
a password or key. The CLI logs it as a WARN record of bundesrat.http on
stderr (once per run, before the first request).
Whether requests to
baseUrlwould travel unencrypted, as one sentence for a warning (without awarning:prefix), orundefinedwhen they would not: forhttps:, for a URL that does not parse, and for a loopback host (localhost, 127.0.0.0/8,::1), where nothing leaves the machine.The sentence names the host (
url.host: host and port, never the userinfo) and what secret travels with the requests: the base URL's credentials when it carries userinfo, and every phrase insecrets(noun phrases such as "the API key"). It never contains a password or key. The CLI logs it as aWARNrecord ofbundesrat.httpon stderr (once per run, before the first request).