Yeah, I suppose you are right. Personally, I don't buy into TLS because the certificates people use to authenticate their connections tend to be unauthenticated (a.k.a. worthless security-wise), so pretending there'd be a secure connection when there really isn't feels counter-productive to me. That's just me, though. It probably won't hurt to use the https URL.