There's a fix for this that the HTTPS site can add to <meta>, which works with newish browsers: the "meta referer" header: http://wiki.whatwg.org/wiki/Meta_referrer

(Looks like HN doesn't set it.)