script src="//yahoo.com/path/to/file.js"
instead of
script src="http://yahoo.com/path/to/file.js";
I recommend using the CDN if you leave off the protocol it'll work as long as they serve HTTPS from the CDN. I know the google CDN works that way.