http://awuuwa.i2p/webpages/why_no_javascript.html
By saying HTTP I include HTTPS as well, because HTTPS all it does is just encrypt and verify some stuff in the background, really it's just HTTP with just that added layer of security and authentication, but it's just too cumbersome to explain that elsewhere in this article, other than to point this out here right now just to avoid the confusion.