code: public static SecurityProtocol getSecurityProtocol( String uri, ServletContext servletContext,
                                                          HttpServletRequest request )
      {
          return AdapterManager.getServletContainerAdapter( servletContext ).getSecurityProtocol( uri, request );
      }
docs: Tell whether a web application resource requires a secure transport protocol.  This is
  determined from web.xml; for example, the following block specifies that all resources under
  /login require a secure transport protocol.
  <pre>
  &lt;security-constraint&gt;
  &lt;web-resource-collection&gt;
  &lt;web-resource-name&gt;Secure PageFlow - begin&lt;/web-resource-name&gt;
  &lt;url-pattern&gt;/login/*&lt;/url-pattern&gt;
  &lt;/web-resource-collection&gt;
  &lt;user-data-constraint&gt;
  &lt;transport-guarantee&gt;CONFIDENTIAL&lt;/transport-guarantee&gt;
  &lt;/user-data-constraint&gt;
  &lt;/security-constraint&gt;
  </pre>
  
  @param uri a webapp-relative URI for a resource.  There must not be query parameters or a scheme
  on the URI.
  @param request the current request.
  @return <code>Boolean.TRUE</code> if a transport-guarantee of <code>CONFIDENTIAL</code> or
  <code>INTEGRAL</code> is associated with the given resource; <code>Boolean.FALSE</code>
  a transport-guarantee of <code>NONE</code> is associated with the given resource; or
  <code>null</code> if there is no transport-guarantee associated with the given resource.