Serve assets over https

Protocol-relative URLs are not an option because yui-s enforces HTTPS. HTTPS
resources on HTTP sites are fine anyways.