only append length hiding string on https requests