avoid "man-in-the-middle"