Why it matters
An https page that pulls scripts, styles, or images over http has those requests blocked or downgraded by the browser. Layout and behaviour break with no server-side error to show for it.
How to fix it
Serve every subresource over https, or let the asset pipeline emit protocol-relative paths.