Toribash
Original Post
Get an SSL certificate, for the love of god
There's no excuse to be on http and not https in 2018. The certificates are literally there for free.
https://doesmysiteneedhttps.com/

If you don't have a sysadmin I even volunteer to do this for you