[chrj]

You should buy yourself an SSL certificate and serve the widget using https as well.

[CalinBalauru]

Do you have a good suggestions for buy this certificates, I always struggle buying one that is acceptable (affoortable) for a startup.

[dm2]

Namecheap offers an $8 and $10 certificate at https://www.namecheap.com/ssl-certificates.aspx?aff=29535

(I included my affiliate link above, recently signed up to the program and figured why not, let me know if it is against any rules and I'll remove it.)

There is also a free cert authority but I've never used them. You have to put a link to their site somewhere on your site though.

https://cert.startcom.org/

[arnehormann]

http://www.startssl.com/ - one year free certificate (renewing is free, too) with a distance of one to the root CA.

[dan1234]

It's worth noting that those free certificates are for non-commercial use.

Their commercial certs are pretty good value if you need one.