Don't know what it's like now, but their web site allowed you to sign up for email updates via plain old HTTP not so long ago -- very security-conscious!