Yes, the hostname and protocol are already set in asset, but there is the function secure_asset('path') which resolves into https... I think I could use secure_asset as a standard since IdeaSpaceVR should not run on a non-encrypted protocol anyways. You could quickly try to use secure_asset and let me know if it would solve your problem.