I couldn't decide. If the proxy passes X-Forwarded-Proto (and I believe the usual suspects all do) then we certainly *could* use that knowledge here. But we don't have the path information, so I believe the proxy would have to look for this header and transform it anyway. If that's the case then I thought it might make more sense to tell the proxy they are completely responsible for transforming it. If you have a different opinion, let me know.