Not sure if this is best suited to Programmers, Server Fault or Stack Overflow. It\'s not, however, a question about developing for Facebook.
the biggest reason for us when designing it was so that it would work with https without a mixed-content warning. Getting a cert for a real domain is a lot easier than getting one for 127.0.0.1.