Yea, but since the default is to use CORS, it doesn't matter as much because api.stackmob.com supports HTTPS