EFF has the following recommendations for website operators who wish to protect their users from this kind of man-in-the-middle attack: