You Tube Video over SSL

Posted on 2009-02-12
Last Modified: 2013-11-16
Is it possible to embed You Tube video on an SSL (https://) Web site without getting a security alert popup?

I'm wondering if anyone has experience using the APIs and whether they accomodate this.  And, I've seen reference to methods of proxying though I'm not sure I understand how they work.

We've tested users being able to embed You Tube content into a secure https page, but they get an alert when the embedded video player begins to load from You Tube.
Question by:bnordeng
    LVL 33

    Accepted Solution

    YouTube doesn't supply SSL, so you are always going to get some insecure and some secure content. While you *could* use mod_proxy in reverse_proxy mode (proxypass) to cause you to https "serve" content relayed from youtube, that is probably a violation of their usage T&C's, and a waste of bandwidth (if you are going to supply the packets, you should probably host the file yourself and save yourself half the bandwidth :)
    have you considered streaming the content yourself? that would give you more control, not only of the https but of access and usage logging.

    Author Comment

    We had not considered hosting the content ourselves.  The problem is that this is a Web site where users generate their own content in forums.  Unfortunately, the user-generated content transfers over a secure connection (https).  YouTube is perfect for this type of application, but it won't work for us if it doesn't go over SSL.  Looks like we might be out of luck.  I may contact YouTube to see what, exactly, the T&C allow for.

    Featured Post

    Top 6 Sources for Identifying Threat Actor TTPs

    Understanding your enemy is essential. These six sources will help you identify the most popular threat actor tactics, techniques, and procedures (TTPs).

    Join & Write a Comment

    #SSL #TLS #Citrix #HTTPS #PKI #Compliance #Certificate #Encryption #StoreFront #Web Interface #Citrix XenApp
    This paper addresses the security of Sennheiser DECT Contact Center and Office (CC&O) headsets. It describes the DECT security chain comprised of “Pairing”, “Per Call Authentication” and “Encryption”, which are all part of the standard DECT protocol.
    The purpose of this video is to demonstrate how to properly insert a Vimeo Video into a WordPress site or Blog. This will be demonstrated using a Windows 8 PC. Go to your WordPress login page. This will look like the following:…
    The purpose of this video is to demonstrate how to integrate Mailchimp with Facebook. This will be demonstrated using a Windows 8 PC. Mailchimp and Facebook will be used. Log into your Mailchimp account. : Click on your name. Go to Account Setti…

    728 members asked questions and received personalized solutions in the past 7 days.

    Join the community of 500,000 technology professionals and ask your questions.

    Join & Ask a Question

    Need Help in Real-Time?

    Connect with top rated Experts

    23 Experts available now in Live!

    Get 1:1 Help Now