think this is lacking in ensuring a robust & secure communication.

would be good to have views from HNers re: validation of steps mentioned + alternate (better?) options. especially for non general mobile users.