Hardened HTTPS, better CACerts, Easy Proxy Support and more