[caf]

So it looks like the correct solution is for the browser to always supply proto://host/ as the url, regardless of the URL actually accessed.