I'm rather surprised google doesn't require cert pinning for all connections to any google server....