Assessing legal and technical solutions to secure HTTPS