Now there is no excuse anymore not to use https for your website. At https://letsencrypt.org/ you can get a certificate for free. The certificate is only valid for 3 months but it is easy to automate the renewal using the ACME-protocol. For instance with https://certbot.eff.org/. You can test the result at: https://www.ssllabs.com/ssltest/