Start new sites with https. No doubt about it. Get a free Let's Encrypt certificate. Chrome and Firefox already show a warning message on non-ssl login pages. They are going to expand that behaviour to ALL non-ssl pages. So sooner or later you are forced to move to https. It's better to start with it now.
|