Horizon Client must use HTTPS to connect to Horizon 7. If your Horizon clients connect to load balancers or other intermediate servers that pass on the connections to Connection Server instances or security servers, you can off-load TLS to the intermediate servers.