proposal for improving the dont-verify-ssl hack