[benlivengood]

Cloudflare is probably enough. They already control enough ingress that their "checking the security of your connection" could actually mean something.