Yes, there is a requirement to use https connections. If you want to use a http connection, you need to request a temporary entitlement exemption and have a very good reason for it.