We have UKM in progress that will allow us to determine what sites are using HTTP. We will not be able to tell whether the download itself is HTTP due to privacy restrictions. We could potentially add a flag to the UKM to tell us whether the download itself comes from HTTP or HTTPS. Does that meet your needs?

Sorry, it's not clear to me what the difference would be. Do you mean we can record the scheme of the page that initiated the download?

Eventually we'd like to have a list of sites that initiate http downloads, regardless of the location of the download itself. I *think* this is what you meant too?

We're currently in the process of designing/implementing our UKM fields--I've added a field on our doc (go/downloads-ukm). Does this work for you? We would still have to get it cleared by the privacy folks.