use only bits of proof implementation, use CA to verify server