Well it's plain HTTP. No certificates to get wrong or impersonated I guess lol.