Did they ever start using HTTPS? When I tried it a while back, it was HTTP-only.