You are trying to protect against TLS MITM, right?