Yup. It adds an extra identity verification layer, whether your script is served over SSL or not.