When setting webhooks, it\'s saying a Secure URL is required.
Secure URL
You can't receive messages from facebook, because they are calling your webhook URL (SSL ofcourse). You can found more in documentation.
However you can send messages to user from localhost - apparently they are fine with it.