Postcards from the Post HTTP World Amplification of HTTPS Vulnerabilities in the Web Ecosystem