We never had the new generation of Magento until now. And on all the previous versions (1.x.x) we ALWAYS needed to buy and have an SSL certificate installed (otherwise browsers would throw these scary messages at customers who were placing orders saying that placing the order is unsafe and they should get out of there)
We now have Magento 2.1.0 with Paypal and NO SSL certificate installed. There seem to be no Errors or scary messages anywhere and things seem to work just fine. Do I have to buy an SSL and have it installed or are we fine without it?
clarification: This is a brand NEW domain which never had an SSL installed on it. There hasn't been any actual customer orders placed just yet (even-though it's live) - just a test order by us.