$ 0 0 Well, there is this bug, which points out that the same issue occurs with "mixed content" that is actually secured by HSTS.