You could also take out <meta name="referrer" content="origin"> from the pages, then there's no special casing and no referrer (in the https case). Aside from enhanced privacy it might serve as a disincentive to game HN since it becomes less obvious how much traffic HN brings in.