HTTP + HTTPS is fine<p>HTTPS for SaaS and e-commerce web apps is fine<p>HTTP for normal websites is okay (for me, I have no hidden agenda)<p>HTTPS-only for normal websites is silly, why not offer HTTP too? Every request is unique, no internet anonymity.