You need to use either CORS, or a proxy, or JSONP to receive content from another source. Changing the scheme (from http to https or vice versa) changes its origin.
Retrieving data from a secure server to an insecure page eliminates many of the benefits of using SSL.
If you retrieve both pages and the data source via SSL, you can use plain JSON and not introduce these security issues.
source
share