A quick Google suggests you're right, as in either case you must run SSL/TLS.

Appypolylogies.