Doesn't having HTTPS already do that?