draft completed version of 'cipher behind https'