Licson Lee
says to
YSITD
一個header + HTTPS就可以很安全