The consumer trusts that the browser software effectively implements HTTPS with properly pre-installed certificate authorities. Protection is maximal with mutual SSL/TLS, but about the customer-side there isn't a technique to adequately end the SSL/TLS link and disconnect the user other than by expecting the server session to expire or by https://russellz737bsd6.cosmicwiki.com/user