no iframe. CORS between http and https will never work.

Change-Id: Idfa9d9d3ea5444842ec4fed12ca643e9740c59f8