Revisiting man-in-the-middle attacks against HTTPS