Which of the below statements are valid

$$ SSL certificates are not important for protecting sensitive data.

$$ DNS spoofing cannot be used to redirect traffic from a legitimate website to a fake one.

$$ Session tokens should be regenerated after successful login to reduce the risk of session hijacking.

$$ An HTTP proxy server can be used as an exception to the Same Origin Policy, allowing web applications to make cross$-$domain requests indirectly.