SSL doesn't disable the referrer header. It just happens to not be sent when the link you've clicked on isn't also using SSL. If the link you click on happens t

SSL doesn't disable the referrer header. It just happens to not be sent when the link you've clicked on isn't also using SSL. If the link you click on happens to be to an SSL site, they get the full referrer header as intended. A more appropriate way to hide the referrer is to just use a redirection that doesn't include the search terms.