Chris Palmer's presentation "We Must Fix HTTPS":