No, you can just install a self-signed unique cert for each machine.

SahAssar · on Nov 12, 2018

Asking users to install a CA or cert is not a good or scalable solution.

vertex-four · on Nov 13, 2018

Since when does a desktop application need to ask the user anything to install a cert programmatically? Enforced desktop sandboxing hasn't really taken off.

aaaaaaaaaab · on Nov 12, 2018

But then why do you need the DNS/hosts file hack? You can issue a self-signed cert to localhost/127.0.0.1, put it in the user’s trust store and call it a day.