try to stay within tor network or just rely on ssl and assume adversaries know the site but not the content you access.