Plaintext passwords at HN, Reddit, Digg, Slashdot?

I just noticed that Hacker News, Reddit, Digg, and Slashdot all submit login information via plain HTTP, not HTTPS. The login name and password are readily apparent to anyone with a packet sniffer.

This was surprising to me. Am I missing something?

When I checked the login pages of these sites using "Inspect Element" in Safari and saw that they all appeared to submit in plaintext, I assumed that there was some Javascript or something that would override that, but I just logged into all of these sites with a tcpdump capturing the login, and verified that my credentials were indeed in plain text.