No it isn't necessary. But your customers might feel safer if you use it. You can get a cheap SSL cert for $10 a year these days so it's probably worth it getting one.
$10? The cheapest ones I've seen are $50, aside from the free ones which I'm concerned would just throw up all the warnings that self-signed certs throw up. Guess I need to do some more searching around.