It's not required, but using SSL is becoming best practice. See the discussion in http://moodle.org/mod/forum/discuss.php?d=161491 for more details - You may want to buy the SSL certificate and make your site HTTPS only to avoid potential session stealing issues.
Security and privacy
Is an SSL Certicate required for Moodle 2.0
This discussion has been locked so you can no longer reply to it.