I'm not sure... In our case website/iframe domains are different but they're both using https