If only "important" traffic is https, then that narrows the search for them quite a bit, doesn't it?