better? (should probably setup a local ssl to actually test this well...)