A common? trick to avoid the protocol is a schemaless URL:

# Instead of
https://example.com/foo/bar
# use
//example.com/foo/bar
[download]

This will use the same protocol as the origin.