It's not required, but using SSL is becoming best practice. See the discussion in http://moodle.org/mod/forum/discuss.php?d=161491 for more details - You may want to buy the SSL certificate and make your site HTTPS only to avoid potential session stealing issues.
Security and privacy
Is an SSL Certicate required for Moodle 2.0
This discussion has been locked because a year has elapsed since the last post. Please start a new discussion topic.