diff --git a/app/api/display/route.ts b/app/api/display/route.ts
index ea3fe26..682e4ee 100644
--- a/app/api/display/route.ts
+++ b/app/api/display/route.ts
@@ -40,6 +40,16 @@ export async function GET(request: Request) {
 
   const now = new Date();
   const baseUrl = publicBaseUrl(request);
+
+  // How the panel actually reaches us is not otherwise observable: neither the
+  // reverse proxy nor a production Next server logs requests, which is what
+  // made a plain "is it on TLS?" question take a packet capture to answer.
+  // One line per wake, and at most a handful a day.
+  const scheme = baseUrl.startsWith('https://') ? 'https' : 'http';
+  console.info(
+    `[device] ${device.friendlyId} via ${scheme} (${baseUrl})` +
+      (scheme === 'http' ? ' — en clair, voir DEVICE_ALLOW_HTTP' : ''),
+  );
   const { payload, settings, status } = await buildCurrentScreen(now, baseUrl);
   const image = await renderAndStore(payload, settings.imageFormat);