Slightly off topic but TLS is a must, so many things can go wrong with unencrypted sites and the major web browser has in respective latest release started to mark all non-encrypted website with a login form as "Insecure".
SSLlabs is the go to place for all SSL/TLS tests ;)