Change call to google web font to use https

If you're not using the font-face feature there shouldn't be a call to google APIs

I think he's referring to line 121 in template.php that calls http instead of https

Should I simply replace it with https ? is there a price, e.g. performance hit ?

http://torbit.com/blog/2011/01/11/google-libraries-api-and-ssl-performance/

Anecdotal, but that's a significant hit. Perhaps down the road some kind of toggle button / comment settings to switch between http and https?

An @font-face drupal module went https:
http://drupal.org/node/920110

It looks like google is promoting using https by default:
https://developers.google.com/webfonts/docs/webfont_loader

Where do you get that impression ? seems to me they check for https vs http :
wf.src = ('https:' == document.location.protocol ? 'https' : 'http') +...
but thanks for the refference to that page.

Done
http://drupal.org/commitlog/commit/31168/9b60dd60c6c424f1c5fd157db02c48c...