https://techwatching.dev/posts/http-clients-secrets