HTTP-only ACS URL

[Russell Beall]

I seem to be missing on my internet searches for how to set up an SP with a non-HTTPS ACS URL.

We have one working, but the browser complains bitterly on sending a POST to an unencrypted location.

Is there a different ACS Binding I should use, or some documentation which describes this type of setup?  Or is this something to do just during testing phases and isn't really for production release?  I was intending to rely on the SAML2 application level encryption to secure the data in transit...

Thanks,
Russ.