I'm a bit uncomfortable with the server_name being sent in the clear. Couldn't it have been a hash or something?