Interesting perspective-- so, when is it appropriate to not offer SSL/HTTPS? Is it generally okay to skip SSL/HTTPS if a site isn't mission critical or financi

Interesting perspective-- so, when is it appropriate to not offer SSL/HTTPS? Is it generally okay to skip SSL/HTTPS if a site isn't mission critical or financial-focused? I only ask because on Heroku and other platforms, there is a fixed cost to offer SSL (with a custom domain) that over multiple sites could add up.