I don't think there's any real downside to forcing HTTPS on this. Relative protocol links are now considered deprecated. Pretty minor, but good hygiene nonetheless.