Local Registry Mirror and Security

I am deploying a local registry mirror inside my company. Is it best practice to put SSL in front of it? My concern is that our users use their personal Dockerhub accounts, access our company group. Are their Dockerhub credentials safe when passing though this proxy?