Make sure the parent and source are both either HTTP or HTTPS. You can't mix them.

Also, embedding other sites doesn't always work. There are security and other issues. It's hit and miss and I'm not sure on all the details of why some work and some don't. I can embed youtube, facebook widget, other widgets provided by services...but I can't just pull in some mainstream site into my site via iframe.