HTTPS is good to push for wherever possible, even if the Cookie Clicker site itself does not support it now.