title: Does Cross-Origin Resource Sharing(CORS) differentiate between HTTP AND HTTPS?
body: <p>I have two sites : https//:www.domain-only-uses-https.com  and www.domain-uses-both-http-and-https.com </p>
  
  <p>Now I am making 2 ajax GET requests in the page of the former to the later, one is </p>
  
  <pre><code>https://www.domain-uses-both-http-and-https.com/some-path  (using the HTTPS scheme) 
  </code></pre>
  
  <p>and the other one is </p>
  
  <pre><code>http://www.domain-uses-both-http-and-https.com/some-other-path (using the HTTP scheme)
  </code></pre>
  
  <p>And I DID set the "https//:www.domain-only-uses-https.com" as the value of "Access-Control-Allow-Origin:" header in the server "www.domain-uses-both-http-and-https.com ".</p>
  
  <p>But now it seems that only request 1 is allowed by Chrome ,but request 2 is forbidden.</p>
  
  <p>So my question is : does the "Access-Control-Allow-Origin" header  differentiate between HTTP AND HTTPS? 
  Hope I've made myself clear..</p>