I thought https initial request had to happen in the clear in order to get the dns resolved? If so, then you can definitely block/throttle https traffic since you know where it is going.