Hey,

As far as I can tell, the validator doesn't enforce that the video src must be HTTPS.

In the amp-video spec, however, it states that it must be.

Also, there might already be an issue for this. I searched for one, but couldn't find it, so creating a new one. Remove if it's a duplicate.