We should be using https on the amazon book covers on the public and private lists in the opac. I haven't yet checked the intranet, so will file one for that side as well if I find out it needs treatment.
This appears to have been fixed.