You can avoid using an SSL certificate under the following conditions:
- The application is in sandbox mode, visible only to a certain group of people
- You do not care that users use a secure connection on Facebook - you can specify
https://example.com
You can avoid buying such a certificate if your hosting provider has one for you (for example: heroku - ssl setup ).
. , http://startssl.com .
. ( , ).