# Embedding the twitch player in HTTPS site

**URL:** <https://discuss.dev.twitch.com/t/embedding-the-twitch-player-in-https-site/4216>\
**Category:** API\
**Created:** [December 22, 2015, 5:25pm UTC](https://discuss.dev.twitch.com/t/embedding-the-twitch-player-in-https-site/4216 "2015-12-22T17:25:45Z")\
**Posts on this page:** 7\
**Page:** 1

<div class="post-metadata">

**Author:** ![johnrivs](https://d3ovvz0v2ajtpu.cloudfront.net/user_avatar/discuss.dev.twitch.com/johnrivs/32/4119_2.png) [@johnrivs](https://discuss.dev.twitch.com/u/johnrivs)\
**Post date:** [December 22, 2015, 5:25pm UTC](https://discuss.dev.twitch.com/t/embedding-the-twitch-player-in-https-site/4216/1 "2015-12-22T17:25:46Z")

</div>

I’m trying to embed a stream in a website that is served over HTTPS. I’m using `http://player.twitch.tv/?channel={CHANNEL}`, as explained [here](https://github.com/justintv/Twitch-API/blob/master/embed-video.md). Unfortunately, web browsers don’t like mixed content; some of them won’t even load the HTTP asset by default. The user is required to click on an icon (usually a shield) to load ‘insecure content’, the page will refresh and the HTTPS icon will stop being green. Terrible user experience and image.

Can we please get this resource served over HTTPS?

**EDIT** : chat would also be nice to be loaded via HTTPS ([http://www.twitch.tv/{channel}/chat](http://www.twitch.tv/%7Bchannel%7D/chat))

---

<div class="post-metadata">

**Author:** ![3ventic](https://d3ovvz0v2ajtpu.cloudfront.net/user_avatar/discuss.dev.twitch.com/3ventic/32/298_2.png) [@3ventic](https://discuss.dev.twitch.com/u/3ventic)\
**Post date:** [December 22, 2015, 6:45pm UTC](https://discuss.dev.twitch.com/t/embedding-the-twitch-player-in-https-site/4216/2 "2015-12-22T18:45:29Z")

</div>

It’s much bigger a task than just serving the player over HTTPS. The vast video distribution network doesn’t support serving the video segments over HTTPS yet, so the player would still be broken as browsers generally don’t allow non-image resources to be loaded over insecure connections on HTTPS sites at all.

---

<div class="post-metadata">

**Author:** ![johnrivs](https://d3ovvz0v2ajtpu.cloudfront.net/user_avatar/discuss.dev.twitch.com/johnrivs/32/4119_2.png) [@johnrivs](https://discuss.dev.twitch.com/u/johnrivs)\
**Post date:** [December 22, 2015, 6:49pm UTC](https://discuss.dev.twitch.com/t/embedding-the-twitch-player-in-https-site/4216/3 "2015-12-22T18:49:53Z")

</div>

Video can’t be served over HTTPS? Or just streaming video? Because youtube, facebook, livestream and younow are HTTPS.

---

<div class="post-metadata">

**Author:** ![johnrivs](https://d3ovvz0v2ajtpu.cloudfront.net/user_avatar/discuss.dev.twitch.com/johnrivs/32/4119_2.png) [@johnrivs](https://discuss.dev.twitch.com/u/johnrivs)\
**Post date:** [December 25, 2015, 2:23am UTC](https://discuss.dev.twitch.com/t/embedding-the-twitch-player-in-https-site/4216/4 "2015-12-25T02:23:51Z")

</div>

Any word on this? Am I left to assume that we won’t be able to serve secure websites if we want to embed Twitch in them?

---

<div class="post-metadata">

**Author:** ![Fugiman](https://d3ovvz0v2ajtpu.cloudfront.net/user_avatar/discuss.dev.twitch.com/fugiman/32/108_2.png) [@Fugiman](https://discuss.dev.twitch.com/u/Fugiman)\
**Post date:** [December 25, 2015, 3:42am UTC](https://discuss.dev.twitch.com/t/embedding-the-twitch-player-in-https-site/4216/5 "2015-12-25T03:42:40Z")

</div>

For now, yes.

---

<div class="post-metadata">

**Author:** ![dinubish](https://avatars.discourse-cdn.com/v4/letter/d/a698b9/32.png) [@dinubish](https://discuss.dev.twitch.com/u/dinubish)\
**Post date:** [January 3, 2016, 10:39pm UTC](https://discuss.dev.twitch.com/t/embedding-the-twitch-player-in-https-site/4216/6 "2016-01-03T22:39:02Z")

</div>

```
<iframe src="https://www-cdn.jtvnw.net/swflibs/TwitchPlayer.rfc07d37fc4eed1d17243b452dd3441665496e1e0.swf?channel=YOURCHANNEL" frameborder="0" scrolling="no" height="720" width="1225"></iframe>

```

Found something but just a heads up your https green shield icon might not be there if you use this but the stream will load perfectly fine.

---

<div class="post-metadata">

**Author:** ![system](https://d2opxh93rbxzdn.cloudfront.net/original/2X/0/05909729875cce3b53e59d5561c4d23bb14948fc.png) [@system](https://discuss.dev.twitch.com/u/system)\
**Post date:** [February 2, 2016, 10:39pm UTC](https://discuss.dev.twitch.com/t/embedding-the-twitch-player-in-https-site/4216/7 "2016-02-02T22:39:03Z")

</div>

This topic was automatically closed 30 days after the last reply. New replies are no longer allowed.