Just a quick tutorial on exploiting heartbleed for session hijacking. Is it worse to use https than http today?