HttpProtocol setting in web.config - valid also for SSL?

Question

For preventing clickjacking attacks I've put this in web.config:

<system.webServer>
  ...

  <httpProtocol>
    <customHeaders>
      <add name="X-Frame-Options" value="SAMEORIGIN" />
    </customHeaders>
  </httpProtocol>

  ...
</system.webServer>

But my page is served over secure protocol, https. I also have this in web.config:

<system.web>
        <httpCookies requireSSL="true" />
        <authentication mode="Forms">
            <forms name=".AUTH" loginUrl="Login.aspx" requireSSL="true" />
        </authentication>
</system.web>

I wonder if my page served over secure protocol is protected against clickjacking even if custom headers are inside httpProtocol section?