I didn't aware that was a question about http or s. Well, it is generally a good practice to do everything on https. For the particular case of steemreports, it does not involve any sensitive data. Data on steem blockchain is openly accessible for everyone reading. e.g. You may see how much money in my wallet and vice versa. There is no secret (and no privacy to a certain extent) at all. But it definitely works on https as well.