HTTPS (ssl) is very resource hungry, so Zencart is very clever about when it switches it on (and off).

SSL is enabled ONLY when sensitive data is being transmitted - at all other times, your pages will be HTTP.