Hmm.  I think this is right but there is also the case of iOS or streaming URLs, it isn't just SSL.  Any thoughts on how to handle that?