Don't mix the protocols http and https! When accessing the app over SSL the YQL quotes must be fetched over SSL as well.