None, obviously. If you don't have https, you don't even have the illusion of security.