Jquery (or CSS) to Make a Cross Domain Responsive iFrame

yes - that would run on their domain rather than yours. It is the normal way of providing scripts that listen for messages generated from the provider;'s domain.