I'm getting "bug reports" about embed and iframe content not loading on pages, and it's only because the URLs to what they're trying to load are http and they are logged into onMessage, so they're looking at it on an https page, so for security reasons the browser doesn't load the content.