https workaround