Off by one.
IE9 will only issue cross-domain ajax requests if the protocol of the
request is the same as the protocol of the page.