How does this differ from e.g. online banking? Does every user manually check encryption algorithms and keys?