Modifications to the TIP which I think are fine as well.
a) Use an acs-kernel parameter instead of the ns/parameters
b) Use X-SSL-Request header (which is set to 1 if it is SSL) instead of X-FORWARDED_PROTO (which is set to HTTP or HTTPS dependent on the request, but not in use by POUND).
Here is the code snippet from http://jamesthornton.com/writing/openacs-pound.html describing how this is to be done.
if {[string equal [ns_set get [ns_conn headers] "X-SSL-Request"] 1]} {
return 1
} else {
return [string match "https:*" [util_current_location]]
}