Today, all stores should have SSL. My proposal, block access to admin and store if you don't have it ... ...