From: Shing Wai Chan <shing.wai.chan_at_oracle.com>
Date: Fri, 23 Dec 2011 13:50:45 -0800

You may like to define a security constraint with a CONFIDENTIAL
transport-guarantee.
For instance,

<security-constraint>
<web-resource-collection>
<web-resource-name>ssl resources</web-resource-name>
<url-pattern>/*</url-pattern>
</web-resource-collection>
<user-data-constraint>
<transport-guarantee>CONFIDENTIAL</transport-guarantee>
</user-data-constraint>
</security-constraint>

Shing Wai Chan