Thanks for your replies, Skaero and Alec.
I was under the impression that this was an issue local to my site, but it looks like there's more to it.
For now, I'll just stick to https when I type the address. And/Or carefully put in some rewrite rules specific to the roundcube directory in httpd.conf.
Thanks again.