if you don't check the certificate, you are not protected against highjacking