lol1 @ using a single key to decrypt everything; lol2 @ not using certificate pinning