It looks like facebook is making the SSL thing mandatory for facebook apps, if you check under the Application settings at:
On Facebook/ Canvas settings / Secure Canvas URL
You will find a lovely note saying "Required: SSL Cert by October 1, 2011".
You always wondered what else was needed for facebook apps, and now you know...
So how does this going to affect us? Anything in the works?