It's a year-old article. My company builds (among other things) Facebook apps and we definitely receive this alert these days on test accounts that are purely accessing via HTTP.