Maybe you can try and find the secure setting in the gif to show that it isn't there?

Also, if you use this format for images: `![alt text](direct link to image url)` the image gets embedded. You can drag images into github's comment box and it automagically does that