Redirecting to Trust, but Verify