@moxie got it. So next visit will not go over http but direct to https disallowing sslstrip to attack the bridge. Right? Gap = 1st visit. SecuObs - L'observatoire de la sécurite internet - Site d'informations professionnelles francophone sur la sécurité informatique