HTTPS is not an obligation. Most people believe it's a must these days, but it's not. There is a nice rebuttal of Troy's arguments on N-gate (via webcache as di

HTTPS is not an obligation. Most people believe it's a must these days, but it's not. There is a nice rebuttal of Troy's arguments on N-gate (via webcache as direct links from HN end up in an endless pseudo-captcha): http://webcache.googleusercontent.com/search?q=cache:t_oVSNuTvIgJ:n-gate.com/software/+&cd=1&hl=en&ct=clnk&gl=pl http://webcache.googleusercontent.com/search?q=cache:t_oVSNu...