Broken video embeds

[ARB]

I was going to wait until I had more info, but it turns out setting up MySQL is complicated.

I haven't ever seen a working YouTube embed on the forum, while Vimeo appears to work beautifully. As far as I can tell, this is only because the YouTube iframes are being requested as HTTP, which any modern browser (namely, Chrome (I didn't actually test Firefox)) blocks, leaving a gaping hole in the webpage.
According to the MyBB docs, it appears that providing an HTTPS YouTube URL should result in a secure widget. I think it somehow... doesn't.
I have no idea why they aren't working or if it's fixable, but that's what I can see from here. I haven't double checked Vimeo embeds, and I've never seen any others attempted. Hope that helps!

-Aidan

[LeslieNoelani]

Does that mean that changing https to http would make them work?

[Phyllis]

I think we may just have embeds turned off in our settings. I would have to go looking to confirm that, though.

[ARB]

I don't think they're turned off, because when I use inspect element on one (ie, this:)
...there is an iframe, along with the YouTube URL and dimensions.  However, the YouTube URL is HTTP, which is blocked.  I think Vimeo embeds work, though.

[ARB]

Vimeo embed:

Vimeo link:
Dreams

Okay, so after posting that, I'm even more confused.
Apparently none of the embeds work, while normal links to Vimeos are turned into working (httpS) embeds.  (This doesn't work for YouTube; I've tried.)

Code:

Vimeo embed:<br />
<!-- start: video_vimeo_embed --><br />
<iframe src="http://player.vimeo.com/video/120105021" width="500" height="281" frameborder="0" webkitAllowFullScreen mozallowfullscreen allowFullScreen></iframe><br />
<!-- end: video_vimeo_embed --><br />
Vimeo link:<br />
<iframe src="https://player.vimeo.com/video/120105021" width="500" height="300" frameborder="0"></iframe><br />

Oh, and do you think turning off videos would really just set the iframes to HTTP?  When I add an S (in the developer tools) they work perfectly.  That seems like an odd way to try to get rid of them.  Also, in desktop Chrome, there's a shield with an x in the address bar on pages with embeds.  When clicked, it says "This page is trying to load scripts from unauthenticated sources" along with a "load unsafe scripts" button.  When THAT'S clicked, it reloads (with https in the address bar crossed out in red) and they work.

Developer tools on this thread:


Sidenote: They all show up in Tapatalk; that doesn't count.

Double sidenote: when manually changing the URL to http:// in the address bar, everything loads, as there is no mixed content.