Fun tip: If you do something like src="//website.com/resource.js", then browsers will use SSL if the source page was sent over SSL, and won't if it wasn't.