Facebook Pixel HTTP vs HTTPS | Western Kentucky University Skip to main content

HTTP vs HTTPS Embedded Content


At the beginning of October 2017 we will be increasing the security on the WKU Website by forcing the secure HTTPS protocol. Your site will likely not be impacted unless it has content that directly references HTTP instead of HTTPS. You can perform a simple test to see if your page will be impacted. To do so, change the protocol in your browser's address bar from http:// to https://. The browser's address bar may not have a protocol (http://), and in this case just type https:// before the URL. For example, if the page you are checking is http://www.wku.edu/funnymonkeys or www.wku.edu/funnymonkeys (no protocol) - then retype your address as https://www.wku.edu/funnymonkeys.

On this page, you will see examples of what your site may look like if you are using direct references to HTTP. If you see two videos under the YouTube example, you are not viewing this page with HTTPS.

When all content on the page is being loaded securely on the page, your browser may indicate so in the address bar.

Browser URL bar indicating the page is secure

Keep in mind that just because you have told the browser to load your page over HTTPS, by specifying so in the address bar, you may still have some content, such as images, that are still being referenced using HTTP. Your browser may indicate this, again, in the address bar, that the page is not fully secure. These types of issues can be harder to track down since the browser still loads and displays the content. However, the most common source for a page not being fully secure, are images that were not added to the page via OU Campus' Dependency Manager, or images added to the page from other, non-WKU websites using http:// instead of https://.

Browser URL bar indicating the page is not fully secure

 

Examples

Below are some examples, demonstrating how content will is loaded when viewing the page using HTTP and HTTPS. Each example loads the same content over both HTTP and HTTPS. By changing the protocol in the browsers address bar (as discussed above), it becomes clearer to see how this change can effect the content on your pages.

If you see two videos under the YouTube example, you are not viewing this page with HTTPS.

 

YouTube - <iframe>


HTTP

<iframe src="http://www.youtube.com/embed/53ybib_VFu4?rel=0" width="560" height="315" frameborder="0" allowfullscreen="allowfullscreen"></iframe>

HTTPS

<iframe src="https://www.youtube.com/embed/53ybib_VFu4?rel=0" width="560" height="315" frameborder="0" allowfullscreen="allowfullscreen"></iframe>

 

SoundCloud - <iframe>


HTTP

<iframe src="http://w.soundcloud.com/player/?url=http%3A//api.soundcloud.com/tracks/52721403&amp;color=b01e24&amp;auto_play=false&amp;hide_related=false&amp;show_comments=true&amp;show_user=true&amp;show_reposts=false" width="100%" height="166" frameborder="no" scrolling="no"></iframe>

HTTPS

<iframe src="https://w.soundcloud.com/player/?url=https%3A//api.soundcloud.com/tracks/52721403&amp;color=b01e24&amp;auto_play=false&amp;hide_related=false&amp;show_comments=true&amp;show_user=true&amp;show_reposts=false" width="100%" height="166" frameborder="no" scrolling="no"></iframe>

 

Instagram - <script>


HTTP

Cannot demo both on the same page, since both will work if just one does. Use the buttons to demo embeded Instagram code that uses HTTP.

HTTPS

Cannot demo both on the same page, since both will work if just one does. Use the buttons to demo embeded Instagram code that uses HTTPS.

 

Image - <img>


HTTP

<img src="http://www.wku.edu/img/andrewgott.jpg"/>

HTTPS

<img src="https://www.wku.edu/img/andrewgott.jpg"/>

 

Video - <embed>


HTTP

<embed src="http://www.wku.edu/_resources/videos/towels.mp4" type="video/mp4" autostart="0"></embed>

HTTPS

<embed src="https://www.wku.edu/_resources/videos/towels.mp4" type="video/mp4" autostart="0"></embed>

 

Video - <video>


HTTP

<video width="300" height="150" controls="controls">
											<source src="http://www.wku.edu/_resources/videos/towels.mp4" type="video/mp4" />
											</video>

HTTPS

<video width="300" height="150" controls="controls">
											<source src="https://www.wku.edu/_resources/videos/towels.mp4" type="video/mp4" />
											</video>

 

Audio - <embed>


HTTP

<embed src="http://www.wku.edu/_resources/videos/wku_fight_song.mp3" type="audio/mpeg" autostart="0" autoplay="0"></embed>

HTTPS

<embed src="https://www.wku.edu/_resources/videos/wku_fight_song.mp3" type="audio/mpeg" autostart="0" autoplay="0"></embed>

 

Audio - <audio>


HTTP

<audio controls="controls" src="http://www.wku.edu/_resources/videos/wku_fight_song.mp3"></audio>

HTTPS

<audio controls="controls" src="https://www.wku.edu/_resources/videos/wku_fight_song.mp3"></audio>

 

Script - <script>


HTTP

 
<script src="http://www.wku.edu/funnymonkeys/http-vs-https/js-http.js"></script>

HTTPS

 
<script src="https://www.wku.edu/funnymonkeys/http-vs-https/js-https.js"></script>

 


Some of the links on this page may require additional software to view.

 Last Modified 10/5/17