I'd suggest:
> You are accessing %s via HTTP. We strongly suggest you configure your server to require using HTTPS instead.