keep a double check to avoid man in the middle attack