When both webservers have the certificates then IIRC the plan is for everything to be over https.
In reply to Re^3: Monastery login over http by marto in thread Monastery login over http by bliako