[wtallis]

This issue is entirely about connecting to an untrusted endpoint. No endpoint-based solution is possible. This has to be dealt with by ensuring that the transit provider won't sell you out.