Yes, you really need to host your own server and audit the code carefully. Which moves the threat to state actors willing to substitute certs, and that's the p

Yes, you really need to host your own server and audit the code carefully. Which moves the threat to state actors willing to substitute certs, and that's the point at which the web fails you totally anyway.