proof of concept head for https ssi