Where a client's verification results are delivered (HTTPS only in production — private addresses are rejected).