No, protocol-relative is the way to go. | Hacker News

Hacker Newsnew | past | comments | ask | show | jobs | submit

		garfij on May 1, 2013 \| parent \| context \| favorite \| on: Fallback from CDN to local jQuery No, protocol-relative is the way to go.

sp332 on May 1, 2013 [–]

I think HTTPS isn't a bad idea. You don't want some MITM messing with your 3rd-party JS.

chrisbolt on May 1, 2013 | [–]

If you're loading your 3rd-party JS from an HTTP page, they already can.

nicholaides on May 1, 2013 | | [–]

Sure, but it's one less avenue for a MITM attack.

Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact