[esrauch]

Https in this case prevents your users from being hacked, it does nothing to prevent your serverside from being hacked regardless.