We had a thread going at work about finding out if the user is requesting a URL securely, ie: using HTTPS. Various methods were thrown about: getScheme(), getProtocol(), getServerPort()… We missed the most obvious one: isSecure()