Potential mixed content depending on what we serve this from. Can we go protocol-less on that URL?