Yes, a secure connection is required in order to protect you from nefarious websites. This protects your data because when a website is served on the HTTPS (SSL) protocol you can be assured that the information is protected in transit and that the site is who it claims to be.