That's happening because he has a https: link in his source code somewhere. Https on a unsecured server gives you that error