Comment by otabdeveloper4

Yes, I do. You should be following de-facto real world standards, not fantasy ones. Especially if security is involved.