That's it. Use https everywhere and I guess encrypted dns?