It looks like they actually offer https, just don't force it. There's a good chance they're just testing it, seeing as their CA, Let's Encrypt, was made available to the public less than a month ago (and their cert's validity period starts on the LE public beta launch day, so it's unlikely they were part of the private beta):
