I found the following and got it to work now:
http://stackoverflow.com/questions/10092649/how-do-you-start-a-java-servlet-over -https
Within the plugin I can do a request.isSecure() to check if ...well, its a secured request.
Everything works just fine this way.