[UncleMeat]

Right but that works just as well to determine that some js that just uses ordinary network-layer security to send some data doesn't steal anything.