title: https Mixed Content errors
body: <p>We're getting allot of Mixed Content errors on the cart page of our Magento Store</p>
  
  <pre><code> Mixed Content: The page at 'https://www.magento.com/onestepcheckout/index/' was loaded over HTTPS, but requested an insecure stylesheet 'http://fonts.googleapis.com/css?family=Lato:400,300,700,900'. This request has been blocked; the content must be served over HTTPS.
  </code></pre>
  
  <p>I can see the google font file is being called in the head section of our theme via http</p>
  
  <pre><code>&lt;link href='http://fonts.googleapis.com/css?family=PT+Sans' rel='stylesheet' type='text/css'&gt;
  </code></pre>
  
  <p>I'm wondering what is the best way to solve this issue should I change the line above to:</p>
  
  <p><strong>Option 1</strong></p>
  
  <pre><code>&lt;link href='https://fonts.googleapis.com/css?family=PT+Sans' rel='stylesheet' type='text/css'&gt;
  </code></pre>
  
  <p>OR
  <strong>Option 2</strong></p>
  
  <pre><code>&lt;link href='//fonts.googleapis.com/css?family=PT+Sans' rel='stylesheet' type='text/css'&gt;
  </code></pre>
  
  <p>Which is the best method considering most of our site uses http? I was not aware of Option 2, it seems like a very good approach.</p>