seems legit but was not default a few years ago
I found posts people fiddled around with SSL because this was only an option for paid accounts
btw: could you take a look at my openweathermap topic at [SOLVED] Openweathermap Binding - no difference between condition-id and icon-id - could you confirm the same behaviour - I think this is something for the bindings developer