"localhost" and "localhost.example.com" (fully qualified domain name)
127.0.0.1 and "hostname.example.com" (IP address and its domain name)
MUTABILITY: Whether the resource is expected to be modifiable, by whom, and when.
format string: if a format string is mutable, then attackers can modify the format of output and