1. Load CAcert CA
2. Go HTTPS!