Comment by EGreg

In this scenario, Google is still a trusted dealer.

I just posted a general solution anyone can implement without needing Google as the trusted dealer: https://news.ycombinator.com/item?id=48760492