self-mask https ok