You should definitely have SSL certificate on your site. This was standardized in 2018-2019 and most registrars offer this for free.