https://www.sorinmustaca.com/how-to-prevent-ssl-sniffing-through-fake-certificate-injection-attack/