Comment 1 for bug 859798

A possibly useful trick: http://www.paulirish.com/2010/the-protocol-relative-url/

(Although maybe we can just hard-code 'https' for all our off-site stuff; browsers won't alert about that if the main page is http, right?)