A method for providing a server entity, wherein the method is performed in a client and comprises the steps of: providing (S1-1) the client with a secure trusted environment, the environment being trusted by the client and by at least one third party; and accommodating (S1-2), in the secure trusted environment: - at least a local portion (2001A1) of the server entity, the server entity being configured to handle one or more server requests from the client, and - data (2001A2) required by the server entity so as to handle the server request, characterized in that the secure trusted environment is a Trusted Execution Environment, TEE, and the local portion of the server entity is a Local Online Certificate Status Protocol, LOCSP, wherein the accommodating step further comprises receiving (S1-2b), from a network, a bundle of the LOCSP and the data, the bundle being remotely installable code, wherein security in the secure trusted environment is established by secure launching a remote virtual machine on the client, comprising: first verifying (S1-5) that the secure trusted environment is trustworthy; and second verifying (S1-6), by the secure trusted environment, which received server requests stem from the alleged origin wherein the second verifying step uses digital signatures of the LOCSP, further comprising: receiving (S1-6), from a non-local portion (2002A1) of the server entity, information and a policy; and deciding (S1-7), based on the received policy, whether the server requests are to be handled by the local portion or the non-local portion of the server entity. providing (S1-1) the client with a secure trusted environment, the environment being trusted by the client and by at least one third party; and accommodating (S1-2), in the secure trusted environment: - at least a local portion (2001A1) of the server entity, the server entity being configured to handle one or more server requests from the client, and - data (2001A2) required by the server entity so as to handle the server request, characterized in that - at least a local portion (2001A1) of the server entity, the server entity being configured to handle one or more server requests from the client, and - data (2001A2) required by the server entity so as to handle the server request, characterized in that the secure trusted environment is a Trusted Execution Environment, TEE, and the local portion of the server entity is a Local Online Certificate Status Protocol, LOCSP, wherein the accommodating step further comprises receiving (S1-2b), from a network, a bundle of the LOCSP and the data, the bundle being remotely installable code, wherein security in the secure trusted environment is established by secure launching a remote virtual machine on the client, comprising: first verifying (S1-5) that the secure trusted environment is trustworthy; and second verifying (S1-6), by the secure trusted environment, which received server requests stem from the alleged origin wherein the second verifying step uses digital signatures of the LOCSP, further comprising: receiving (S1-6), from a non-local portion (2002A1) of the server entity, information and a policy; and deciding (S1-7), based on the received policy, whether the server requests are to be handled by the local portion or the non-local portion of the server entity. first verifying (S1-5) that the secure trusted environment is trustworthy; and second verifying (S1-6), by the secure trusted environment, which received server requests stem from the alleged origin wherein the second verifying step uses digital signatures of the LOCSP, further comprising: receiving (S1-6), from a non-local portion (2002A1) of the server entity, information and a policy; and deciding (S1-7), based on the received policy, whether the server requests are to be handled by the local portion or the non-local portion of the server entity. receiving (S1-6), from a non-local portion (2002A1) of the server entity, information and a policy; and deciding (S1-7), based on the received policy, whether the server requests are to be handled by the local portion or the non-local portion of the server entity.