Comment by rhodey

This only defers the issue to trusting that index.html is always trusted.