I noticed that the "subscribe" button is not leading to an https address. However, the link in the confirmation email does. So I guess, it would be an easy fix for you to just change it to https.
Thanks, fixed. I just got around to setting this up yesterday so the site itself isn't https yet and I just put // instead of the full path for the form POST.