Use real DOM API, optionally ignore ssl