I have a stupid question: Does this vulnerability exist if rails runs https?