Yes. While we communicate with Stripe's payment gateway through SSL, your site (at a minimum, your payment page) must run over HTTPS using an SSL certificate to ensure the security of your customer's payment information.