so you'd just see if the client sent an http request or a tls request