What is this abomination? It's encryption BEFORE HTTP/HTTPS with a PSK. Useful for a scenario when a man in the middle is expected and cannot be avoided (IronPort). What do I trust? The proxy and the proxy end point. Trust here is required. Who can't I trust? The network.