Facebook has announced that from 6 October all logins and calls to Facebook must travel over the secure browsing protocol. This is already enforced if you use the main website at facebook.com but this will soon become mandatory for all uses of Facebook – including if you use the Facebook API for things like feeds and plugins on your own website.
We expect to see this being applied by Instagram shortly also, as they are owned by Facebook. And this indicates the precedent, a ss well as most other global platforms and social networks.
Facebook’s announcement can be found here: https://developers.facebook.com/blog/post/2018/06/08/enforce-https-facebook-login/
If you do not already have this in place, please contact us to active HTTPS for your hosting and website(s).