HTTPS is not mandatory for all websites, but it is highly recommended. Websites that collect sensitive information from users must have HTTPS to protect that data. It is also beneficial for all websites to improve trust and user experience.