Isn't gzip disabled with https a thing since forever due to a security issue?