load your cdn scripts with // to satisfy https

You just finished setting up https and yet the browser's aren't showing the sexy lock icon on your login or checkout?

Often when loading fonts or scripts from public CDNs we just copy paste the tag into our layouts and forget about it. Case in point jQuery's download page just tells you to include the http:// url. Instead of changing that to https you can just emit the protocol part entirely so it ends up looking like this

<script src="//code.jquery.com/jquery-1.10.1.min.js"></script>

Voila, on your encrypted pages it loads the encrypted version and on your regular pages it loads the regular version.

Of course the file needs to be available under https in order for this to work, so make sure to check the file can be reached.