Why amp-video and amp-audio force the usage of https for src?

Question

On the documentation about AMP-video this is indicated that:

src: Required if no children are present. Must be HTTPS.

Why this is needed ?

• Is this for security issue ? (my video and audio doesn't need security).
• Is this for performance (and in this case, since when https is faster than http ?)
• Any other reason ?

From my point of view, that look strange to allow the full AMP technology to work on http and only restrict part of them to https. What is the rational behind that ?

Answer 1

It's a security thing - if/when your content is hosted on Google's CDN, all elements will be served over HTTPS, so standard HTTP elements won't work.