Request To A Json Resource From An Http Page To An Https Server

Can a jsonp request from a user on an http page (made by the browser) to an https server be considered secure? For example: The user is on: http://www.example.net On that page ther

Solution 1:

No. While the data can't be sniffed in-flight, the HTTP page triggering the request is vulnerable to alteration by man-in-the-middle attacks. JS could be injected which can then leak the data retrieved via HTTPS.

Solution 2:

ys it is secure provided U send encrypted data to other page and decrypt the info on another page