Hi Daniel ,
That looks like the same code I found in 1.3.1 in the default.php file
<form action="<?php echo JRoute::_('index.php?option=com_cmc&format=raw&task=subscription.save');?>"
but SSL is enabled in Joomla's Global Configuration settings, why would Joomla use a http url? The url before the index.php?option is not a site url it is like this;
<form id="mc-embedded-subscribe-form" class="validate" novalidate="" target="_blank" name="mc-embedded-subscribe-form" method="post" action="
ourdomain.us4.list-manage.com/subscribe/...********************
">
So it is a "manage.com" domain url. I don't know where CMC is getting that domain but the one it has in its Webhooks field is a https url.
Thanks for looking at this,
Ray