1. Either form will work, but if you decide to switch to https://, the second form of the <link> will always work.
2. There was a bug when the font-family had a double quote, but if you’re updated to the latest versions of Weaver Xtreme and Weaver Xtreme Plus, the problem is fixed. Just FYI, if the font-family does not include blanks in the name, you don’t need any kind of quotation mark at all. They are just needed so CSS can parse the name with blanks in it properly.