3 ms·

For this to work properly, it requires https only, to prevent downgrade attacks (you stated that). Google analytics is also served both over http & https ? Can

• pingooo 12y ago
  From https://developers.google.com/analytics/devguides/collection/gajs/asyncTracking https://developers.google.com/analytics/devguides/collection... ga.src = ('https:' == document.location.protocol ? 'https://ssl' https://ssl' : 'http://www' http://www') + '.google-analytics.com/ga.js';