https://www.securityprivacyrisk.com/daring-fireball-security-trade-offs/