Facebook login...do I actually NEED httpS?

Okaaaay,

Do I have to be httpS to use Facebook login?

I have my EasySocial app all set up and you've kindly helped me with this, but I'm still getting the oAuth URL blocked notification on login....everything seems set up fine, but am I right in thinking that for Easy Social Facebook Login, and other stuff like Easy Blog Autopost, then the problem is not the oAuth URL that I've added (I followed your documentation), it's that my actual website needs httpS...the SSL certificate?

If so, that's a bummer....and this wasn't the case last year, was it?

Thanks