Re: https with a different domain. XHR doesn't let you access a different domain, you'd have to use JSONP which won't let you trap errors easily. And if I wer

Re: https with a different domain. XHR doesn't let you access a different domain, you'd have to use JSONP which won't let you trap errors easily. And if I weren't sitting at a page served by HTTPS, I would not enter credit card information, and most web users are trained to look for the padlock icon and all that.