For production environment, you need SSL and the SSL provider must be one that's on Google's approved list otherwise you run into another problem.