Detect if the connection is via a secure channel

[tutorials4u]

Use the servlet request's isSecure() or getAuthType() methods. Or you look at these HTTP headers : CERT_KEYSIZE , CERT_KEYSIZE, HTTPS_KEYSIZE