integrate ekr's text on insecure origins
see http://lists.w3.org/Archives/Public/public-media-capture/2014Dec/0000.html
Merge pull request #104 from dontcallmedom/insecure-origins

integrate ekr's text on insecure origins