Thanks for pointing this out. The actual API provides SSL encryption, the landing page however doesn't.