SSL challenge and escrows