If you're concerned about the overhead of an SSL handshake, another option is simply using '//embed.example.com' so it automatically chooses http/https based on the main site.