Me too.
Right. And if it’s a reverse proxy, then it is responsible for https termination.
But it could be some setup in which localhost is allowed to connect to the server via the hostname but no one else is. Or DNS locally returns the right address or the Real DNS does not. Or they could bypass the test because it’s so annoying that it won’t let them proceed.