I think they are not using ssl on their site.