I'm not trying to be a twit here, but be fair to the site admins: say that after *.matasano.com works fully under https without any mixed-content warnings. E.g

I'm not trying to be a twit here, but be fair to the site admins: say that after *.matasano.com works fully under https without any mixed-content warnings. E.g., http://www.matasano.com/ http://www.matasano.com/ sources http://use.typekit.com/zpb4ovg.js http://use.typekit.com/zpb4ovg.js. But there's no https://use.typekit.com https://use.typekit.com. How are you going to fix that? It takes a village.