Bingo. HTTPS only is a much better way to operate web properties these days -- the only downside is a fairly marginal investment of money and time.
What's interesting is to see the headaches people experience with mixed content warnings/errors before they move to the Light Side of the Force (I've been at places where this is a substantial undertaking/roadblock).