--- a/plugins/mod_websocket.lua	Thu Feb 18 10:00:56 2021 +0100
+++ b/plugins/mod_websocket.lua	Thu Feb 18 10:05:30 2021 +0100
@@ -266,7 +266,7 @@
 	-- See mod_http and #540
 	session.ip = request.ip;
 
-	session.secure = consider_websocket_secure or session.secure;
+	session.secure = consider_websocket_secure or request.secure or session.secure;
 	session.websocket_request = request;
 
 	session.open_stream = session_open_stream;