Cracking the Lens Targeting HTTP s Hidden Attack-Surface