also by not serving fake domain certs and man-in-the-middle attacking their own employees. just a thought.