We have development machines that test web applications under development over https, because the deployed app operates over https.
We have a couple of internal url's set up in our hosts file, so that https://project-dev and https://project-www can be used to test different branches. We also debug in the windows azure dev fabric, which causes the app to go over https://127.0.0.1. There is another cert for this, however it is automatically generated by the dev fabric.
To make our browsers ignore the unsafe certificates, we drag them from Personal to Trusted Root Certification Authorities.
Does this make our dev machines vulnerable in any way? If so, how?