The main threat of not buying an SSL certificate is private information like, transaction details, passwords, or usernames, falling into wrong hands.