An Attack that Strips Away SSL (https) Status