Doesn't this mean the traffic is being sent un-encrypted across the ocean?
Amazon's ELB (the EC2 load balancer) used to send HTTPS traffic to your back-end unencrypted, but I believe they have since fixed this.
That's what I mean. In that mode it's sending traffic that should be HTTPS over HTTP.